Underground CMS Search.Cache.Inc.PHP Backdoor Vulnerability

Bugtraq ID:	26521
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 21 2007 12:00AM
Updated:	Nov 21 2007 11:54PM
Credit:	2²hot²2 a.k.a D4m14n and shadowleet are credited with discovering this issue.
Vulnerable:	AnonymServices Inc. Underground CMS 1.8 AnonymServices Inc. Underground CMS 1.7 AnonymServices Inc. Underground CMS 1.4
Not Vulnerable:

Underground CMS Search.Cache.Inc.PHP Backdoor Vulnerability

Underground CMS is prone to a backdoor vulnerability.

Attackers can exploit this issue to gain unauthorized access to the application. Successful attacks will compromise the affected application and possibly the underlying webserver.

Underground CMS 1.4, 1.7, and 1.8 are vulnerable; other versions may also be affected.

Underground CMS Search.Cache.Inc.PHP Backdoor Vulnerability

Attackers exploit this issue using a browser.

The following proof-of-concept exploit is available:

• /data/vulnerabilities/exploits/26521.html

Underground CMS Search.Cache.Inc.PHP Backdoor Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Underground CMS Search.Cache.Inc.PHP Backdoor Vulnerability

References:

• Vendor Homepage (AnonymServices Inc.)
  
• Ucms <= 1.8 Backdoor Remote Command Execution Exploit ([email protected])