Flyspeck CMS Remote Password Change Vulnerability and Local File Include Vulnerability
BID:35011
Info
Flyspeck CMS Remote Password Change Vulnerability and Local File Include Vulnerability
| Bugtraq ID: | 35011 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2009 12:00AM |
| Updated: | May 19 2009 07:50PM |
| Credit: | ahmadbady |
| Vulnerable: |
Flyspeck Flyspeck CMS 6.8 |
| Not Vulnerable: | |
Discussion
Flyspeck CMS Remote Password Change Vulnerability and Local File Include Vulnerability
Flyspeck CMS is prone to multiple security vulnerabilities:
1. A vulnerability may permit an attacker to change the password of arbitrary users and gain unauthorized access to the affected application. A successful exploit will completely compromise victims' accounts.
2. A local file-include vulnerability allows the attacker to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.
Flyspeck CMS 6.8 is vulnerable; other versions may also be affected.
Flyspeck CMS is prone to multiple security vulnerabilities:
1. A vulnerability may permit an attacker to change the password of arbitrary users and gain unauthorized access to the affected application. A successful exploit will completely compromise victims' accounts.
2. A local file-include vulnerability allows the attacker to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.
Flyspeck CMS 6.8 is vulnerable; other versions may also be affected.
Exploit / POC
Flyspeck CMS Remote Password Change Vulnerability and Local File Include Vulnerability
Attackers can use a browser to exploit these issues.
The following example URI and exploit code are available:
Attackers can use a browser to exploit these issues.
The following example URI and exploit code are available:
Solution / Fix
Flyspeck CMS Remote Password Change Vulnerability and Local File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Flyspeck CMS Remote Password Change Vulnerability and Local File Include Vulnerability
References:
References:
- Vendor Homepage (Flyspeck)