WallCity-Server: Shoutcast Admin Panel 'index.php' Local File Include Vulnerability
BID:29733
Info
WallCity-Server: Shoutcast Admin Panel 'index.php' Local File Include Vulnerability
| Bugtraq ID: | 29733 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-2813 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2008 12:00AM |
| Updated: | May 07 2015 05:28PM |
| Credit: | CWH Underground |
| Vulnerable: |
WallCity-Server: Shoutcast Admin Panel WallCity-Server: Shoutcast Admin Panel 2.0 |
| Not Vulnerable: | |
Discussion
WallCity-Server: Shoutcast Admin Panel 'index.php' Local File Include Vulnerability
WallCity-Server: Shoutcast Admin Panel is prone to a local file-include vulnerability.
An attacker can exploit this issue to include arbitrary local files and execute PHP code on the affected computer in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
WallCity-Server: Shoutcast Admin Panel 2.0 is vulnerable; other versions may also be affected.
WallCity-Server: Shoutcast Admin Panel is prone to a local file-include vulnerability.
An attacker can exploit this issue to include arbitrary local files and execute PHP code on the affected computer in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
WallCity-Server: Shoutcast Admin Panel 2.0 is vulnerable; other versions may also be affected.
Exploit / POC
WallCity-Server: Shoutcast Admin Panel 'index.php' Local File Include Vulnerability
The following proof-of-concept URI is available:
http://www.example.com/wallcity/index.php?page=../../../../../../etc/passwd%00
The following proof-of-concept URI is available:
http://www.example.com/wallcity/index.php?page=../../../../../../etc/passwd%00
Solution / Fix
WallCity-Server: Shoutcast Admin Panel 'index.php' Local File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
WallCity-Server: Shoutcast Admin Panel 'index.php' Local File Include Vulnerability
References:
References:
- WallCity-Server: Shoutcast Admin Panel Product Page (WallCity-Server: Shoutcast Admin Panel)