MyBloggie Multiple Remote File Include Vulnerabilities

Bugtraq ID:	18241
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 02 2006 12:00AM
Updated:	Aug 09 2006 11:31PM
Credit:	ERNE and sh3ll are credited with the discovery of these vulnerabilities.
Vulnerable:	myBloggie myBloggie 2.1.3 Beta myBloggie myBloggie 2.1.3 myBloggie myBloggie 2.1.1
Not Vulnerable:

MyBloggie Multiple Remote File Include Vulnerabilities

MyBloggie is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Update: Conflicting reports indicate that this issue does not exist in MyBloggie. This BID will be updated when more details are available.

MyBloggie Multiple Remote File Include Vulnerabilities

Attackers can exploit these issues via a web client.

The following proof-of-concept URIs are available:

• /data/vulnerabilities/exploits/myBloggie_poc.txt

MyBloggie Multiple Remote File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected]

Note that the 'scode.php' script is reportedly not vulnerable for version 2.1.3.

MyBloggie Multiple Remote File Include Vulnerabilities

References:

• myBloggie Web Site (myBloggie)
  
• # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit ("erne ayaz" )
  
• myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion ([email protected])
  
• Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerab ([email protected])