UBBDesign JCDex Lite Index.PHP Remote File Include Vulnerability

Bugtraq ID:	14081
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 28 2005 12:00AM
Updated:	Jun 28 2005 12:00AM
Credit:	skdaemon porra <[email protected]> of [A]nomaly [1]n [T]he [S]ystem is credited with the discovery of this vulnerability.
Vulnerable:	UBBDesign JCDex Lite 3.0 UBBDesign JCDex Lite 2.0
Not Vulnerable:

UBBDesign JCDex Lite Index.PHP Remote File Include Vulnerability

JCDex Lite is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

UBBDesign JCDex Lite Index.PHP Remote File Include Vulnerability

No exploit is required.

UBBDesign JCDex Lite Index.PHP Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

UBBDesign JCDex Lite Index.PHP Remote File Include Vulnerability

References:

• UBBDesign Homepage (UBBDesign)