WebSPELL 'picture.php' Local File Disclosure Vulnerability
BID:34751
Info
WebSPELL 'picture.php' Local File Disclosure Vulnerability
| Bugtraq ID: | 34751 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 28 2009 12:00AM |
| Updated: | Apr 29 2009 05:56PM |
| Credit: | Juri Gianni aka yeat |
| Vulnerable: |
webSPELL webSPELL 4.1.2 webSPELL webSPELL 4.1.1 webSPELL webSPELL 4.1 webSPELL webSPELL 4.2.0d webSPELL webSPELL 4.2.0c webSPELL webSPELL 4.0 |
| Not Vulnerable: | |
Discussion
WebSPELL 'picture.php' Local File Disclosure Vulnerability
WebSPELL is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.
This issue may be related to the vulnerability described in BID 23348 (WebSpell Picture.PHP Multiple Local File Include Vulnerabilities).
WebSPELL 4.2.0d is vulnerable; other versions may also be affected.
WebSPELL is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.
This issue may be related to the vulnerability described in BID 23348 (WebSpell Picture.PHP Multiple Local File Include Vulnerabilities).
WebSPELL 4.2.0d is vulnerable; other versions may also be affected.
Exploit / POC
WebSPELL 'picture.php' Local File Disclosure Vulnerability
Attackers may exploit this issue through a browser.
The following exploit code is available:
Attackers may exploit this issue through a browser.
The following exploit code is available:
Solution / Fix
WebSPELL 'picture.php' Local File Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].