Pearl Forums Index.PHP Local File Include Vulnerability

Bugtraq ID:	15433
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 15 2005 12:00AM
Updated:	Nov 15 2005 12:00AM
Credit:	ABDUCTER_MINDS is credited with the discovery of this vulnerability.
Vulnerable:	Pearl Forums Pearl Forums 2.0
Not Vulnerable:

Pearl Forums Index.PHP Local File Include Vulnerability

Pearl Forums is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to disclose sensitive information. This may help with further attacks on the affected computer.

It should be noted that this issue may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server.

Pearl Forums Index.PHP Local File Include Vulnerability

No exploit is required.

An example URI has been provided:

http://www.example.com/support/index.php?mode=../../index

Pearl Forums Index.PHP Local File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Pearl Forums Index.PHP Local File Include Vulnerability

References:

• Pearl Forums Web Page (Pearl Forums )