SiteXS CMS 'type' Parameter Local File Include Vulnerability
BID:33457
Info
SiteXS CMS 'type' Parameter Local File Include Vulnerability
| Bugtraq ID: | 33457 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2009 12:00AM |
| Updated: | Jan 28 2009 07:19PM |
| Credit: | darkjoker |
| Vulnerable: |
SiteXS CMS SiteXS CMS 0.1.1 SiteXS CMS SiteXS CMS 0.1.1 Pre-Alpha |
| Not Vulnerable: | |
Discussion
SiteXS CMS 'type' Parameter Local File Include Vulnerability
SiteXS CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.
SiteXS CMS 0.1.1 and prior versions are vulnerable.
SiteXS CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.
SiteXS CMS 0.1.1 and prior versions are vulnerable.
Exploit / POC
SiteXS CMS 'type' Parameter Local File Include Vulnerability
Attackers can exploit this issue with a browser.
The following proof-of-concept is available:
Attackers can exploit this issue with a browser.
The following proof-of-concept is available:
Solution / Fix
SiteXS CMS 'type' Parameter Local File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
SiteXS CMS 'type' Parameter Local File Include Vulnerability
References:
References:
- SiteXS CMS Homepage (SiteXS CMS)