OpenSolution Quick.Cms.Lite Local File Include Vulnerability

Bugtraq ID:	20923
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 05 2006 12:00AM
Updated:	Nov 07 2006 05:22PM
Credit:	Kacper discovered this issue.
Vulnerable:	Open Solution Quick.Cms.Lite 0.3
Not Vulnerable:

OpenSolution Quick.Cms.Lite Local File Include Vulnerability

Quick.Cms.Lite is prone to a remote file-include vulnerability.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

Quick.Cms.Lite 0.3 and prior versions are affected.

OpenSolution Quick.Cms.Lite Local File Include Vulnerability

Attackers can exploit this issue via a web client.

• /data/vulnerabilities/exploits/quick-cms-lite-lfi.txt

OpenSolution Quick.Cms.Lite Local File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenSolution Quick.Cms.Lite Local File Include Vulnerability

References:

• Vendor Homepage (Open Solution)