FusionPHP Fusion News Index.PHP Remote File Include Vulnerability

Bugtraq ID:	19546
Class:	Input Validation Error
CVE:	CVE-2006-4240
Remote:	Yes
Local:	No
Published:	Aug 16 2006 12:00AM
Updated:	Feb 13 2007 04:27AM
Credit:	OUTLAW is credited with the discovery of this vulnerability.
Vulnerable:	Fusionphp Fusion News 3.7
Not Vulnerable:	Fusionphp Fusion News 3.7.5

FusionPHP Fusion News Index.PHP Remote File Include Vulnerability

Fusion News is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to access the underlying system.

FusionPHP Fusion News Index.PHP Remote File Include Vulnerability

Attackers can exploit this issue via a web client.

Sample exploit code has been included.

• /data/vulnerabilities/exploits/fusionnews-3.7-rfi.pl

FusionPHP Fusion News Index.PHP Remote File Include Vulnerability

Solution:
The vendor has released version 3.7.5 to address this issue; please see the reference section for details.


Fusionphp Fusion News 3.7

• Fusionphp fusionnews-3.7.5.zip
  http://downloads.sourceforge.net/fnews/fusionnews-3.7.5.zip

FusionPHP Fusion News Index.PHP Remote File Include Vulnerability

References:

• Fusion News (Fusionphp)