Big Forum Local File Include and Arbitrary File Upload Vulnerabilities
BID:41133
Info
Big Forum Local File Include and Arbitrary File Upload Vulnerabilities
| Bugtraq ID: | 41133 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 24 2010 12:00AM |
| Updated: | Jun 24 2010 12:00AM |
| Credit: | Zer0 Thunder |
| Vulnerable: |
Big Forum Big Forum 5.2 |
| Not Vulnerable: | |
Discussion
Big Forum Local File Include and Arbitrary File Upload Vulnerabilities
Big Forum is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the context of the webserver, and obtain sensitive information. By exploiting the arbitrary-file-upload and local file-include vulnerabilities at the same time, the attacker may be able to execute remote code.
Big Forum 5.2 is vulnerable; other versions may also be affected.
Big Forum is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the context of the webserver, and obtain sensitive information. By exploiting the arbitrary-file-upload and local file-include vulnerabilities at the same time, the attacker may be able to execute remote code.
Big Forum 5.2 is vulnerable; other versions may also be affected.
Exploit / POC
Big Forum Local File Include and Arbitrary File Upload Vulnerabilities
An attacker can exploit these issues via a browser.
The following example URI is available:
http://www.example.com/bf/admin/admin.php?do=mods&aktion=install&datei=../../../../../boot.ini%00
An attacker can exploit these issues via a browser.
The following example URI is available:
http://www.example.com/bf/admin/admin.php?do=mods&aktion=install&datei=../../../../../boot.ini%00
Solution / Fix
Big Forum Local File Include and Arbitrary File Upload Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Big Forum Local File Include and Arbitrary File Upload Vulnerabilities
References:
References:
- Big Forum Sourceforge Page (Big Forum)