PunBB 'pun_user[language]' Parameter Multiple Local File Include Vulnerabilities

Bugtraq ID:	32360
Class:	Input Validation Error
CVE:	CVE-2008-6308 CVE-2009-2787
Remote:	Yes
Local:	No
Published:	Nov 19 2008 12:00AM
Updated:	Jul 05 2016 10:01PM
Credit:	athos
Vulnerable:	PunBB PunBB 1.2.20 PunBB PunBB 1.2.19 PunBB PunBB 1.2.18 PunBB PunBB 1.2.17 PunBB PunBB 1.2.16 PunBB PunBB 1.2.15 PunBB PunBB 1.2.14 PunBB PunBB 1.2.13 PunBB PunBB 1.2.12 PunBB PunBB 1.2.11 PunBB PunBB 1.2.10 PunBB PunBB 1.2.9 PunBB PunBB 1.2.8 PunBB PunBB 1.2.7 PunBB PunBB 1.2.6 PunBB PunBB 1.2.5 PunBB PunBB 1.2.4 PunBB PunBB 1.2.3 PunBB PunBB 1.2.2 PunBB PunBB 1.2.1
Not Vulnerable:

PunBB 'pun_user[language]' Parameter Multiple Local File Include Vulnerabilities

PunBB is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities using directory-traversal strings to execute arbitrary local PHP scripts within the context of the webserver process.

PunBB 1.2 is vulnerable; other versions may also be affected.

PunBB 'pun_user[language]' Parameter Multiple Local File Include Vulnerabilities

Attackers can exploit these issues via a browser.

Immunity has released the following exploit to members of the Immunity Partners program:

https://www.immunityinc.com/downloads/immpartners/punbb_global.tgz

The following exploit code is available:

• /data/vulnerabilities/exploits/32360.php
• /data/vulnerabilities/exploits/32360.pl

PunBB 'pun_user[language]' Parameter Multiple Local File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PunBB 'pun_user[language]' Parameter Multiple Local File Include Vulnerabilities

References:

• PunBB Homepage (PunBB)