GeSHI Example.PHP Local File Include Vulnerability
BID:14903
Info
GeSHI Example.PHP Local File Include Vulnerability
| Bugtraq ID: | 14903 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 22 2005 12:00AM |
| Updated: | Sep 22 2005 12:00AM |
| Credit: | Maksymilian Arciemowicz is credited with the discovery of this vulnerability. |
| Vulnerable: |
GeSHi GeSHi 1.0.7 .2 GeSHi GeSHi 1.0.7 .1 GeSHi GeSHi 1.0.7 GeSHi GeSHi 1.0.6 GeSHi GeSHi 1.0.5 GeSHi GeSHi 1.0.4 GeSHi GeSHi 1.0.3 GeSHi GeSHi 1.0.2 |
| Not Vulnerable: |
GeSHi GeSHi 1.0.7 .3 GeSHi GeSHi 1.0.1 GeSHi GeSHi 1.0 .0 |
Discussion
GeSHI Example.PHP Local File Include Vulnerability
GeSHI is prone to a local file include vulnerability. This is due to a lack of proper validation of user-supplied input.
An attacker may leverage this issue to disclose sensitive information. This may help with further attacks on the affected computer.
It should be noted that this issue may also be leveraged to read arbitrary PHP files on an affected computer with the privileges of the Web server.
GeSHI is prone to a local file include vulnerability. This is due to a lack of proper validation of user-supplied input.
An attacker may leverage this issue to disclose sensitive information. This may help with further attacks on the affected computer.
It should be noted that this issue may also be leveraged to read arbitrary PHP files on an affected computer with the privileges of the Web server.
Exploit / POC
GeSHI Example.PHP Local File Include Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
GeSHI Example.PHP Local File Include Vulnerability
Solution:
The vendor has released version 1.0.7.3 to address this issue.
Solution:
The vendor has released version 1.0.7.3 to address this issue.
References
GeSHI Example.PHP Local File Include Vulnerability
References:
References:
- GeSHi Release Notes Web Page (GeSHi)
- GeSHi Web Page (GeSHi)