FarsiNews Directory Traversal and Local File Include Vulnerabilities
BID:16580
Info
FarsiNews Directory Traversal and Local File Include Vulnerabilities
| Bugtraq ID: | 16580 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 10 2006 12:00AM |
| Updated: | Mar 03 2006 04:31AM |
| Credit: | Hamid Ebadi is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
FarsiNews FarsiNews 2.5 FarsiNews FarsiNews 2.1 Beta2 FarsiNews FarsiNews 2.1 |
| Not Vulnerable: |
FarsiNews FarsiNews 2.5.3 |
Discussion
FarsiNews Directory Traversal and Local File Include Vulnerabilities
FarsiNews is prone to directory-traversal and local file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit the directory-traversal vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process.
The local file-include vulnerability lets the attacker include arbitrary local files. The impact of this issue depends on the content of the files included. If an attacker can place a malicious script on the vulnerable computer (either through legitimate means or through other latent vulnerabilities), then the attacker may be able to execute arbitrary code in the context of the webserver process. The attacker may also be able to use existing scripts to perform some malicious activity.
FarsiNews is prone to directory-traversal and local file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit the directory-traversal vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process.
The local file-include vulnerability lets the attacker include arbitrary local files. The impact of this issue depends on the content of the files included. If an attacker can place a malicious script on the vulnerable computer (either through legitimate means or through other latent vulnerabilities), then the attacker may be able to execute arbitrary code in the context of the webserver process. The attacker may also be able to use existing scripts to perform some malicious activity.
Exploit / POC
FarsiNews Directory Traversal and Local File Include Vulnerabilities
An exploit is not required.
The following proof of concept examples are available:
http://www.example.com/index.php?archive=/../users.db.php%00
http://www.example.com/Farsi1/index.php?archive=/../[file-to-read]%00
http://www.example.com/show_archives.php?template=/../../[local-file]%00
An exploit is not required.
The following proof of concept examples are available:
http://www.example.com/index.php?archive=/../users.db.php%00
http://www.example.com/Farsi1/index.php?archive=/../[file-to-read]%00
http://www.example.com/show_archives.php?template=/../../[local-file]%00
Solution / Fix
FarsiNews Directory Traversal and Local File Include Vulnerabilities
Solution:
The vendor has released an update to address this issue. Please contact the vendor for further information.
Solution:
The vendor has released an update to address this issue. Please contact the vendor for further information.
References
FarsiNews Directory Traversal and Local File Include Vulnerabilities
References:
References:
- FarsiNews 2.5 Multiple Vulnerabilities (Hamid Ebadi)
- FarsiNews 2.5 Multiple Vulnerabilities - Forum discussion (FarsiNews)
- FarsiNews 2.5 Multiple Vulnerabilities - Forum discussion (FarsiNews)
- FarsiNews Homepage (FarsiNews)