eXtplorer 'include/init.php' Local File Include Vulnerability

Bugtraq ID:	33955
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 02 2009 12:00AM
Updated:	Mar 03 2009 07:46PM
Credit:	Juan Galiana Lara
Vulnerable:	eXtplorer eXtplorer 2.0
Not Vulnerable:	eXtplorer eXtplorer 2.0.1

eXtplorer 'include/init.php' Local File Include Vulnerability

eXtplorer is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks.

eXtplorer 2.0.0 is vulnerable; prior versions may also be affected.

eXtplorer 'include/init.php' Local File Include Vulnerability

Attackers can exploit this issue via a browser.

The following example URIs are available:

http://www.example.com/path/?lang=../../path/to/maliciuos_uploaded_code
http://www.example.com/path/?lang=../../../../../etc/passwd%00

eXtplorer 'include/init.php' Local File Include Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.

eXtplorer 'include/init.php' Local File Include Vulnerability

References:

• eXtplorer Homepage (eXtplorer)
  
• [ISecAuditors Security Advisories] eXtplorer Remote Code Execution (ISecAuditors Security Advisories )