Cryptographp 'index.php' Local File Include Vulnerability
BID:34122
Info
Cryptographp 'index.php' Local File Include Vulnerability
| Bugtraq ID: | 34122 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 15 2009 12:00AM |
| Updated: | Mar 16 2009 05:06PM |
| Credit: | Jan G.B. <[email protected]> |
| Vulnerable: |
Cryptographp Cryptographp 1.4 |
| Not Vulnerable: | |
Discussion
Cryptographp 'index.php' Local File Include Vulnerability
Cryptographp is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view files and execute local scripts from the Cryptographp directory in the context of the webserver process. This may aid in further attacks.
Cryptographp 1.4 is vulnerable; other versions may also be affected.
Cryptographp is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view files and execute local scripts from the Cryptographp directory in the context of the webserver process. This may aid in further attacks.
Cryptographp 1.4 is vulnerable; other versions may also be affected.
Exploit / POC
Cryptographp 'index.php' Local File Include Vulnerability
Attackers can exploit this issue via a browser.
Attackers can exploit this issue via a browser.
Solution / Fix
Cryptographp 'index.php' Local File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Cryptographp 'index.php' Local File Include Vulnerability
References:
References:
- Cryptographp Homepage (Cryptographp)