CedStat Index.PHP Remote File Include Vulnerability

Bugtraq ID:	22588
Class:	Input Validation Error
CVE:	CVE-2007-1020
Remote:	Yes
Local:	No
Published:	Feb 16 2007 12:00AM
Updated:	May 12 2015 07:34PM
Credit:	sn0oPy is credited with the discovery of this vulnerability.
Vulnerable:	CedStat CedStat 1.31
Not Vulnerable:

CedStat Index.PHP Remote File Include Vulnerability

CedStat is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary PHP code in the context of the webserver process.

This issue affects version 1.31; prior versions may also be affected.

CedStat Index.PHP Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available:

http://www.example.com/cedstat/index.php?hier=%3C%68%31%3E%74%65%73%74%65%64%20%62%79%20%73%6E%30%6F%50%79%3C%2F%68%31%3E

CedStat Index.PHP Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

CedStat Index.PHP Remote File Include Vulnerability

References:

• CedStat Web Site (CedStat)
  
• CedStat v1.31 XSS ([email protected])