Galaxy Scripts Mini File Host 'upload.php' POST Parameter Local File Include Vulnerability

Bugtraq ID:	27366
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 20 2008 12:00AM
Updated:	Jan 22 2008 08:58PM
Credit:	shinmai discovered this vulnerability.
Vulnerable:	Galaxyscripts Mini File Host 1.2.1 Galaxyscripts Mini File Host 1.2
Not Vulnerable:

Galaxy Scripts Mini File Host 'upload.php' POST Parameter Local File Include Vulnerability

Galaxy Scripts Mini File Host is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit this issue to execute arbitrary server-side scripts and retrieve potentially sensitive information.

This issue affects Mini File Host 1.2.1 and prior versions.

Galaxy Scripts Mini File Host 'upload.php' POST Parameter Local File Include Vulnerability

An attacker can exploit this issue with a browser.

The following proof-of-concept script is available:

• /data/vulnerabilities/exploits/27366.pl

Galaxy Scripts Mini File Host 'upload.php' POST Parameter Local File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Galaxy Scripts Mini File Host 'upload.php' POST Parameter Local File Include Vulnerability

References:

• MiniFileHost 1.2.1 Released (GalaxyScripts)