MODxCMS Index.PHP Directory Traversal Vulnerability

Bugtraq ID:	17533
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 14 2006 12:00AM
Updated:	Apr 17 2006 10:16PM
Credit:	Rusydi Hasan M is credited with the discovery of this vulnerability.
Vulnerable:	MODxCMS MODxCMS 0.9.1
Not Vulnerable:

MODxCMS Index.PHP Directory Traversal Vulnerability

MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

MODxCMS Index.PHP Directory Traversal Vulnerability


This vulnerability may be exploited with a web client.

The following proof-of-concept URI is available:

http://www.example.com/[modx_dir]/index.php?id=[parameter][reverse_derectory]%00

MODxCMS Index.PHP Directory Traversal Vulnerability

Solution:

To address this issue, the vendor has released a patch available at the following location:

http://modxcms.com/forums/index.php/topic,3982.0.htmlhttp://modxcms.com/forums/index.php/topic,3982.0.html

MODxCMS Index.PHP Directory Traversal Vulnerability

References:

• Vendor Homepage (MODx)
  
• Re: Vulnerabilities in MOD (Victor Brilon )
  
• Vulnerabilities in MODx ([email protected])