Old Guy's Scripts TalkBack Comments and Guestbook Multiple Remote File Include Vulnerabilities
BID:26520
Info
Old Guy's Scripts TalkBack Comments and Guestbook Multiple Remote File Include Vulnerabilities
| Bugtraq ID: | 26520 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6105 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2007 12:00AM |
| Updated: | Jan 03 2008 10:50PM |
| Credit: | NoGe is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Old Guy's Scripts Talkback Comments and Guestbook 2.2.7 |
| Not Vulnerable: |
Old Guy's Scripts Talkback Comments and Guestbook 2.2.8 |
Discussion
Old Guy's Scripts TalkBack Comments and Guestbook Multiple Remote File Include Vulnerabilities
TalkBack Comments and Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
Talkback Comments and Guestbook 2.2.7 is vulnerable; other versions may also be affected.
TalkBack Comments and Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
Talkback Comments and Guestbook 2.2.7 is vulnerable; other versions may also be affected.
Exploit / POC
Old Guy's Scripts TalkBack Comments and Guestbook Multiple Remote File Include Vulnerabilities
An attacker can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/path/comments-display-tpl.php?language_file=[evilcode]
http://www.example.com/path/comments-display-tpl.php?config[comments_form_tpl]=[evilcode]
http://www.example.com/path/addons/separate-comments-mod/my-comments-display-tpl.php?language_file=[evilcode]
An attacker can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/path/comments-display-tpl.php?language_file=[evilcode]
http://www.example.com/path/comments-display-tpl.php?config[comments_form_tpl]=[evilcode]
http://www.example.com/path/addons/separate-comments-mod/my-comments-display-tpl.php?language_file=[evilcode]
Solution / Fix
Old Guy's Scripts TalkBack Comments and Guestbook Multiple Remote File Include Vulnerabilities
Solution:
The vendor released TalkBack 2.2.8 to address this issue. Please see the references for more information.
Old Guy's Scripts Talkback Comments and Guestbook 2.2.7
Solution:
The vendor released TalkBack 2.2.8 to address this issue. Please see the references for more information.
Old Guy's Scripts Talkback Comments and Guestbook 2.2.7
-
Old Guy's Scripts Version 2.2.8
http://www.scripts.oldguy.us/ccount/click.php?id=6
References
Old Guy's Scripts TalkBack Comments and Guestbook Multiple Remote File Include Vulnerabilities
References:
References:
- TalkBack Release Notes (Old Guy's Scripts)
- Vendor Homepage (Old Guy's Scripts)
- TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities ([email protected])