OpenEngine Template Unauthorized Access Vulnerability

Bugtraq ID:	17871
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 08 2006 12:00AM
Updated:	May 08 2006 09:29PM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	openEngine openEngine 1.7.1 openEngine openEngine 1.8 beta2
Not Vulnerable:

OpenEngine Template Unauthorized Access Vulnerability

openEngine is prone to an unauthorized-access vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to access privileged and potentially sensitive information. This may aid in other attacks.

OpenEngine Template Unauthorized Access Vulnerability

This issue can be exploited with a web client.

The following proof-of-concept URI are available:

• /data/vulnerabilities/exploits/openEngine-0508-ua.txt

OpenEngine Template Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

OpenEngine Template Unauthorized Access Vulnerability

References:

• openEngine Homepage (openEngine)
  
• OpenEngine (PHP CMS) ([email protected])