PHP Weather Local File Include and Cross Site Scripting Vulnerabilities
BID:32820
Info
PHP Weather Local File Include and Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 32820 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-5771 CVE-2008-5770 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2008 12:00AM |
| Updated: | Jul 05 2016 10:01PM |
| Credit: | ahmadbady |
| Vulnerable: |
PHP Weather PHP Weather 2.2.2 |
| Not Vulnerable: | |
Discussion
PHP Weather Local File Include and Cross Site Scripting Vulnerabilities
PHP Weather is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.
The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
PHP Weather 2.2.2 is vulnerable; other versions may also be affected.
PHP Weather is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.
The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
PHP Weather 2.2.2 is vulnerable; other versions may also be affected.
Exploit / POC
PHP Weather Local File Include and Cross Site Scripting Vulnerabilities
Attackers can exploit these issues via a browser.
The following example URIs are available:
For the local file-include issue:
http://www.example.com/path/test.php?metar=()&language=[Lfi]%00
For the cross-site scripting issue:
http://www.example.com/path/config/make_config.php/>"><ScRiPt>alert(0)</ScRiPt>
Attackers can exploit these issues via a browser.
The following example URIs are available:
For the local file-include issue:
http://www.example.com/path/test.php?metar=()&language=[Lfi]%00
For the cross-site scripting issue:
http://www.example.com/path/config/make_config.php/>"><ScRiPt>alert(0)</ScRiPt>
Solution / Fix
PHP Weather Local File Include and Cross Site Scripting Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
PHP Weather Local File Include and Cross Site Scripting Vulnerabilities
References:
References:
- PHP Weather Homepage (PHP Weather)