RETIRED: Gcards Addnews.PHP Remote File Include Vulnerability

Bugtraq ID:	20461
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 11 2006 12:00AM
Updated:	Oct 11 2006 09:49PM
Credit:	DeatH VirUs is credited with the discovery of this vulnerability.
Vulnerable:	gCards gCards 1.13
Not Vulnerable:

RETIRED: Gcards Addnews.PHP Remote File Include Vulnerability

gcards is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Version 1.13 is affected by this issue; other versions may also be affected.

This BID has been retired.

RETIRED: Gcards Addnews.PHP Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

An example proof of concept URI follows:

http://www.example.com/gcards/admin/addnews.php?languagefile=shell code

RETIRED: Gcards Addnews.PHP Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

This BID has been retired.

RETIRED: Gcards Addnews.PHP Remote File Include Vulnerability

References:

• gCards Web Site (gregphoto.net)
  
• gcards (languagefile) <= Remote File Include ([email protected])
  
• Re: gcards (languagefile) <= Remote File Include (str0ke )