phpSANE 'save.php' Remote File Include Vulnerability
BID:44234
Info
phpSANE 'save.php' Remote File Include Vulnerability
| Bugtraq ID: | 44234 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-3188 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 26 2009 12:00AM |
| Updated: | Aug 26 2009 12:00AM |
| Credit: | CoBRa_21 |
| Vulnerable: |
David Fröhlich phpSANE 0.5.0 |
| Not Vulnerable: | |
Discussion
phpSANE 'save.php' Remote File Include Vulnerability
phpSANE is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
phpSANE 0.5.0 is vulnerable; other versions may also be affected.
phpSANE is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
phpSANE 0.5.0 is vulnerable; other versions may also be affected.
Exploit / POC
phpSANE 'save.php' Remote File Include Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/path/save.php?file_save= (Shell Code)
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/path/save.php?file_save= (Shell Code)