ASCET Interactive Huski CMS 'i' Parameter Local File Include Vulnerability

Bugtraq ID:	38126
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 05 2010 12:00AM
Updated:	Feb 22 2010 05:22PM
Credit:	Eldar "Wireghoul" Marcussen
Vulnerable:	ASCET Interactive huski CMS 0
Not Vulnerable:

ASCET Interactive Huski CMS 'i' Parameter Local File Include Vulnerability

Huski CMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the computer; other attacks are also possible.

ASCET Interactive Huski CMS 'i' Parameter Local File Include Vulnerability

An attacker can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/size.php?i=index.php

Proof-of-concept code is also available:

• /data/vulnerabilities/exploits/38126.php

ASCET Interactive Huski CMS 'i' Parameter Local File Include Vulnerability

Solution:
Reports indicate that the vendor has addressed this issue in current versions of the application, but this has not been confirmed.

ASCET Interactive Huski CMS 'i' Parameter Local File Include Vulnerability

References:

• JAHx102 - HuskiCMS local file inclusion ([email protected])
  
• ASCET Interactive Homepage (ASCET Interactive)