PHPRaid RSS.PHP Remote File Include Vulnerability

Bugtraq ID:	23066
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 20 2007 12:00AM
Updated:	Mar 21 2007 05:23PM
Credit:	Cold Z3ro is credited with the discovery of this vulnerability.
Vulnerable:	phpRaid phpRaid 3.0.6 phpRaid phpRaid 3.0.5 phpRaid phpRaid 3.0.4
Not Vulnerable:

PHPRaid RSS.PHP Remote File Include Vulnerability

The phpRaid application is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

PHPRaid RSS.PHP Remote File Include Vulnerability

Attackers can use a browser to exploit this issue.

The following exploit is available:

• /data/vulnerabilities/exploits/23016.pl

PHPRaid RSS.PHP Remote File Include Vulnerability

Solution:
The vendor released a patch to address this issue. Please see the references for more information.


phpRaid phpRaid 3.0.6

• phpRaid [PATCH] phpRaid v3.0.7
  http://www.phpraider.com/index.php?PHPSESSID=bb44d3228f68e542bb7d073e9 b6ae649&action=tpmod;dl=get10

PHPRaid RSS.PHP Remote File Include Vulnerability

References:

• phpRaid Homepage (phpRaid)
  
• [PATCH] phpRaid v3.0.7 Changelog (phpRaid)