Peaceworks Computer Consulting Phormation Remote Arbitrary Code Execution Vulnerability

Bugtraq ID:	3393
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 02 2001 12:00AM
Updated:	Oct 02 2001 12:00AM
Credit:	This vulnerability was discovered and posted to BugTraq by: [email protected].
Vulnerable:	PeaceWorks Computer Consulting Phormation 0.9.1
Not Vulnerable:	PeaceWorks Computer Consulting Phormation 0.9.2

Peaceworks Computer Consulting Phormation Remote Arbitrary Code Execution Vulnerability

Phormation is a freely available, open-source set of PHP functions. It allows users to create any type of HTML form with a database backend.

A problem exists in Phormation that will allow a remote attacker to execute arbitrary code on a host running the software(with the privileges of the webserver process). It is possible to supply arbitrary data to the $include variable. As a result, the affected script may be redirected to execute arbitrary code located on an external host, as specified by the attacker.

This issue can be exploited if the remote attacker submits a maliciously crafted URL.

Peaceworks Computer Consulting Phormation Remote Arbitrary Code Execution Vulnerability

This vulnerability can be exploited with a web browser.

Peaceworks Computer Consulting Phormation Remote Arbitrary Code Execution Vulnerability

Solution:
PeaceWorks recommends that users upgrade to version 0.9.2 of Phormation.

Peaceworks Computer Consulting Phormation Remote Arbitrary Code Execution Vulnerability

References:

• Phormation (PeaceWorks Computer Consulting)