phpRealty 'view.php' Remote File Include Vulnerability
BID:31213
Info
phpRealty 'view.php' Remote File Include Vulnerability
| Bugtraq ID: | 31213 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-4134 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 17 2008 12:00AM |
| Updated: | May 07 2015 05:23PM |
| Credit: | ka0x |
| Vulnerable: |
phpRealty phpRealty 0.03 phpRealty phpRealty 0.02 |
| Not Vulnerable: |
phpRealty phpRealty 0.05 |
Discussion
phpRealty 'view.php' Remote File Include Vulnerability
phpRealty is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are also possible.
phpRealty 0.3 and prior versions are vulnerable.
phpRealty is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are also possible.
phpRealty 0.3 and prior versions are vulnerable.
Exploit / POC
phpRealty 'view.php' Remote File Include Vulnerability
An attacker can exploit this issue via a browser.
The following example URI is available:
http://www.example.com/manager/static/view.php?propID=0&INC= [ S H E L L ]
An attacker can exploit this issue via a browser.
The following example URI is available:
http://www.example.com/manager/static/view.php?propID=0&INC= [ S H E L L ]
Solution / Fix
phpRealty 'view.php' Remote File Include Vulnerability
Solution:
Reportedly, the vendor has fixed the issue in phpRealty 0.05. Please see the references for more information.
Solution:
Reportedly, the vendor has fixed the issue in phpRealty 0.05. Please see the references for more information.