Douran Portal Multiple Input Validation Vulnerabilities

Bugtraq ID:	35013
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 18 2009 12:00AM
Updated:	Jun 13 2011 05:30PM
Credit:	Abysssec
Vulnerable:	Douran Portal Douran Portal 3.9 23
Not Vulnerable:	Douran Portal Douran Portal 3.9.8.0 Douran Portal Douran Portal 3.9.5.0.1

Douran Portal Multiple Input Validation Vulnerabilities

Douran Portal is prone to multiple input-validation vulnerabilities:

- Two arbitrary-file-download vulnerabilities
- An arbitrary-file-upload vulnerability
- An information-disclosure vulnerability

An attacker can exploit these issues to upload and execute arbitrary PHP code in the context of the webserver process or obtain sensitive information. Other attacks are also possible.

Douran Portal 3.9.0.23 is vulnerable; other versions may also be affected.

Douran Portal Multiple Input Validation Vulnerabilities

Attackers can exploit these issues via a browser.

The following example URIs are available:

http://www.example.com/Admin/ImportExport/Download.aspx?filename=../../web.config
http://www.example.com/download.aspx?FileNameAttach=/web.config
http://www.example.com/DesktopModules/fck/editor/filemanager/upload/test.html
http://www.example.com/DesktopModules/DesktopCalendar/HZAN_pickercal.aspx?calsize='

Douran Portal Multiple Input Validation Vulnerabilities

Solution:
Vendor updates are available. Please contact the vendor for more information.

Douran Portal Multiple Input Validation Vulnerabilities

References:

• Douran Portal Homepage (Douran Portal)