Specimen Image Database Remote File Include Vulnerability

Bugtraq ID:	20574
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 16 2006 12:00AM
Updated:	Oct 17 2006 10:14PM
Credit:	Kw3[R]Ln is credited with the discovery of this vulnerability.
Vulnerable:	Specimen Image Database Specimen Image Database 0
Not Vulnerable:

Specimen Image Database Remote File Include Vulnerability

Specimen Image Database is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

Specimen Image Database Remote File Include Vulnerability

Attackers can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://www.example.com/[path]/client.php?dir=attacker's_file

Specimen Image Database Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Specimen Image Database Remote File Include Vulnerability

References:

• SID - [dir] Remote File Include Vulnerability (Kw3[R]Ln)
  
• SID Homepage (Specimen Image Database)