PHP Nuke Copying and Deleting Files Vulnerability
BID:3510
Info
PHP Nuke Copying and Deleting Files Vulnerability
| Bugtraq ID: | 3510 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 05 2001 12:00AM |
| Updated: | Nov 05 2001 12:00AM |
| Credit: | Discovered by Magnux Software, and posted to the BugTraq mailing list by [email protected] on November 5, 2001. |
| Vulnerable: |
Francisco Burzi PHP-Nuke 5.2 |
| Not Vulnerable: | |
Discussion
PHP Nuke Copying and Deleting Files Vulnerability
PHP Nuke is a web portal creation and management package, implemented in the PHP scripting language. The default installation includes the script 'admin/case/case.filemanager.php', which can be used to copy and delete files on the server file system.
While the script contains code used to ensure it is only called by an administrative script responsible for user authentication, the implementation of this is flawed. As a result, any remote user may call the script directly without authenticating, and copy and delete any file on the server, subject to the user permissions under which the script executes.
PHP Nuke is a web portal creation and management package, implemented in the PHP scripting language. The default installation includes the script 'admin/case/case.filemanager.php', which can be used to copy and delete files on the server file system.
While the script contains code used to ensure it is only called by an administrative script responsible for user authentication, the implementation of this is flawed. As a result, any remote user may call the script directly without authenticating, and copy and delete any file on the server, subject to the user permissions under which the script executes.
Exploit / POC
PHP Nuke Copying and Deleting Files Vulnerability
This vulnerability can be exploited with a web browser.
This vulnerability can be exploited with a web browser.