Simpnews Wap_short_news.PHP Remote File Include Vulnerability

Bugtraq ID:	18410
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 13 2006 12:00AM
Updated:	Jun 14 2006 05:21PM
Credit:	SpC-x is credited with the discovery of this vulnerability.
Vulnerable:	Bosch SimpNews 2.13 Bosch SimpNews 2.0.1 Bosch SimpNews 2.30
Not Vulnerable:

Simpnews Wap_short_news.PHP Remote File Include Vulnerability

Simpnews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Further information from Steven M. Christey reports this may not be an issue.

Simpnews Wap_short_news.PHP Remote File Include Vulnerability

This issue can be exploited through the use of a web client.

The following URI has been provided

• /data/vulnerabilities/exploits/Simpnews-rfi.txt

Simpnews Wap_short_news.PHP Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Simpnews Wap_short_news.PHP Remote File Include Vulnerability

References:

• SimpNews Homepage (Bosch)
  
• Re: REMOTE FILE INCLUSION ( ALL ) (Steven M. Christey)
  
• Simpnews <= All version - Remote File Include Vulnerabilities ([email protected])