TikiWiki CMS 'tiki-listmovies.php' Directory Traversal Vulnerability

Bugtraq ID:	27008
Class:	Input Validation Error
CVE:	CVE-2007-6528
Remote:	Yes
Local:	No
Published:	Dec 24 2007 12:00AM
Updated:	Apr 29 2009 08:46PM
Credit:	Jesus Olmos Gonzalez discovered this issue.
Vulnerable:	TikiWiki Project TikiWiki 1.9.8 1 TikiWiki Project TikiWiki 1.9.8 TikiWiki Project TikiWiki 1.9.7 TikiWiki Project TikiWiki 1.9.6 TikiWiki Project TikiWiki 1.9.5 TikiWiki Project TikiWiki 1.9.4 TikiWiki Project TikiWiki 1.9.3 1 TikiWiki Project TikiWiki 1.9.2 TikiWiki Project TikiWiki 1.9.1 .1 TikiWiki Project TikiWiki 1.9.1 TikiWiki Project TikiWiki 1.9 -rc3.1 TikiWiki Project TikiWiki 1.9 -rc3 TikiWiki Project TikiWiki 1.9 -rc2 TikiWiki Project TikiWiki 1.9 -rc1 TikiWiki Project TikiWiki 1.8.5 TikiWiki Project TikiWiki 1.8.4 + Gentoo Linux TikiWiki Project TikiWiki 1.8.3 TikiWiki Project TikiWiki 1.8.2 TikiWiki Project TikiWiki 1.8.1 TikiWiki Project TikiWiki 1.8 TikiWiki Project TikiWiki 1.7.9 TikiWiki Project TikiWiki 1.7.8 TikiWiki Project TikiWiki 1.7.7 TikiWiki Project TikiWiki 1.7.6 TikiWiki Project TikiWiki 1.7.5 TikiWiki Project TikiWiki 1.7.4 TikiWiki Project TikiWiki 1.7.3 TikiWiki Project TikiWiki 1.7.2 TikiWiki Project TikiWiki 1.7.1 .1 TikiWiki Project TikiWiki 1.6.1 TikiWiki Project TikiWiki 1.9.8.3 TikiWiki Project TikiWiki 1.9.8.2 TikiWiki Project TikiWiki 1.9.3.2 Gentoo Linux
Not Vulnerable:	TikiWiki Project TikiWiki 1.9.9

TikiWiki CMS 'tiki-listmovies.php' Directory Traversal Vulnerability

TikiWiki CMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.

Versions prior to TikiWiki CMS 1.9.9 are vulnerable.

TikiWiki CMS 'tiki-listmovies.php' Directory Traversal Vulnerability

An attacker can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/tiki-listmovies.php?movie=../../../../../../etc/passwd%001234

TikiWiki CMS 'tiki-listmovies.php' Directory Traversal Vulnerability

Solution:
The vendor has released TikiWiki CMS 1.9.9 to address this issue. Please see the references for more information.


TikiWiki Project TikiWiki 1.9.8.3

• TikiWiki Project tikiwiki-1.9.9.tar.gz
  http://downloads.sourceforge.net/tikiwiki/tikiwiki-1.9.9.tar.gz?modtim e=1198314005&big_mirror=1

TikiWiki CMS 'tiki-listmovies.php' Directory Traversal Vulnerability

References:

• TikiWiki Homepage (TikiWiki)
  
• TikiWiki Release Notes 1.9.9 (TikiWiki Project)
  
• [ISecAuditors Security Advisories] Tikiwiki CMS is vulnerable to path traversal (ISecAuditors Security Advisories )
  
• Release Process 1.9.9 (TikiWiki Project)