Download Management for PHP-Fusion Multiple Local File Include Vulnerabilities

Bugtraq ID:	27618
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 05 2008 12:00AM
Updated:	Feb 05 2008 11:06PM
Credit:	Psiczn <[email protected]> discovered these vulnerabilities.
Vulnerable:	PHP-Fusion Download Management Module 1.00
Not Vulnerable:

Download Management for PHP-Fusion Multiple Local File Include Vulnerabilities

Download Management for PHP-Fusion is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues may allow an attacker to access potentially sensitive information and execute arbitrary local scripts in the context of the affected application.

These issues affect Download Management 1.00; other versions may also be vulnerable.

Download Management for PHP-Fusion Multiple Local File Include Vulnerabilities

Attackers may exploit these issues through a browser.

The following proof-of-concept URIs are available:

http://example.com/infusions/download_management/infusion.php?settings[locale]=LFI%00
http://example.com/infusions/download_management/download_management.php?settings[locale]=LFI%00

Download Management for PHP-Fusion Multiple Local File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Download Management for PHP-Fusion Multiple Local File Include Vulnerabilities

References:

• Download Management v1.00 (mistermartin75)