Admidio 'get_file.php' Local File Include Vulnerability

Bugtraq ID:	29127
Class:	Input Validation Error
CVE:	CVE-2008-5209
Remote:	Yes
Local:	No
Published:	May 09 2008 12:00AM
Updated:	May 07 2015 05:29PM
Credit:	n3v3rh00d
Vulnerable:	Admidio Team Admidio 1.4.8
Not Vulnerable:	Admidio Team Admidio 1.4.9 Admidio Team Admidio 2.0

Admidio 'get_file.php' Local File Include Vulnerability

Admidio is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view local files in the context of the webserver process. This may aid in further attacks.

Admidio 1.4.8 is vulnerable; other versions may also be affected.

Admidio 'get_file.php' Local File Include Vulnerability

Attackers can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/adm_program/modules/download/get_file.php?folder=&file=../../../../../../../../../../etc/passwd&default_folder=

Admidio 'get_file.php' Local File Include Vulnerability

Solution:
The vendor released Admidio 1.4.9 as well as 2.0 to address this issue. Please see the references for more information.

Admidio 'get_file.php' Local File Include Vulnerability

References:

• Admidio Homeage (Admidio Team)