w3blabor Local File Include and Arbitrary File Upload Vulnerabilities
BID:32675
Info
w3blabor Local File Include and Arbitrary File Upload Vulnerabilities
| Bugtraq ID: | 32675 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 07 2008 12:00AM |
| Updated: | Dec 11 2008 06:11PM |
| Credit: | DNX |
| Vulnerable: |
w3blabor w3blabor 3.0.5 |
| Not Vulnerable: | |
Discussion
w3blabor Local File Include and Arbitrary File Upload Vulnerabilities
The 'w3blabor' program is prone to a local file-include vulnerability and two arbitrary-file-upload vulnerabilities because it fails to sufficiently sanitize user-supplied input.
An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the context of the webserver, and obtain sensitive information. By exploiting the arbitrary-file-upload and local file-include vulnerabilities at the same time, the attacker may be able to execute remote code.
These issues affect w3blabor 3.0.5; other versions may also be affected.
The 'w3blabor' program is prone to a local file-include vulnerability and two arbitrary-file-upload vulnerabilities because it fails to sufficiently sanitize user-supplied input.
An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the context of the webserver, and obtain sensitive information. By exploiting the arbitrary-file-upload and local file-include vulnerabilities at the same time, the attacker may be able to execute remote code.
These issues affect w3blabor 3.0.5; other versions may also be affected.
Exploit / POC
w3blabor Local File Include and Arbitrary File Upload Vulnerabilities
An attacker can exploit these issues via a browser.
The following exploit is available:
An attacker can exploit these issues via a browser.
The following exploit is available:
Solution / Fix
w3blabor Local File Include and Arbitrary File Upload Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
w3blabor Local File Include and Arbitrary File Upload Vulnerabilities
References:
References:
- w3blabor Home Page (w3blabor)