FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

Bugtraq ID:	35367
Class:	Input Validation Error
CVE:	CVE-2009-2143
Remote:	Yes
Local:	No
Published:	Jun 12 2009 12:00AM
Updated:	Jun 30 2009 08:59PM
Credit:	darkmasking
Vulnerable:	FireStats FireStats 1.6.1
Not Vulnerable:	FireStats FireStats 1.6.2

FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

FireStats is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

FireStats 1.6.1 is vulnerable; prior versions may also be affected.

FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

An attacker can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/[path]/wp-content/plugins/firestats/firestats-wordpress.php?fs_javascript=[darkc0de]

FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

Solution:
The vendor FireStats 1.6.2 to address this issue. Please see the references for more information.

FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

References:

• FireStats Homepage (FireStats)