Torrential Getdox.PHP Directory Traversal Vulnerability

Bugtraq ID:	15530
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 22 2005 12:00AM
Updated:	Nov 22 2005 12:00AM
Credit:	Shell <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Torrential Torrential 1.2
Not Vulnerable:	Torrential Torrential 1.2 Beta

Torrential Getdox.PHP Directory Traversal Vulnerability

Torrential is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input.

An attacker can exploit this issue to retrieve arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

Torrential Version 1.2 is vulnerable; other versions may also be vulnerable.

Torrential Getdox.PHP Directory Traversal Vulnerability

An exploit is not required.

Example URI have been provided:

http://www.example.com/torrential/dox/getdox.php/../forums.php
http://www.example.com/torrential/dox/getdox.php/../../index.html

Torrential Getdox.PHP Directory Traversal Vulnerability

Solution:
Torrential version 1.2 Beta has been releas3ed to address this issue.


Torrential Torrential 1.2

• Torrential TBSource_-_Torrential_Beta_1.2-2005-09-25-1220-expert01.rar
  prdownloads.sourceforge.net/torrentbits/TBSource_-_Torrential_Beta_1.2 -2005-09-25-1220-expert01.rar

Torrential Getdox.PHP Directory Traversal Vulnerability

References: