Pulse CMS Basic Local File Include Vulnerability

Bugtraq ID:	45186
Class:	Input Validation Error
CVE:	CVE-2010-4330
Remote:	Yes
Local:	No
Published:	Dec 05 2010 12:00AM
Updated:	Mar 19 2015 09:42AM
Credit:	Mark Stanislav
Vulnerable:	Pulse CMS Basic 1.2.8
Not Vulnerable:	Pulse CMS Basic 1.2.9

Pulse CMS Basic Local File Include Vulnerability

Pulse CMS Basic is prone to a local file-include vulnerability.

An attacker can exploit this issue to include arbitrary local files and execute PHP code on the affected computer in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

Pulse CMS Basic 1.2.8 is vulnerable; other versions may also be affected.

Pulse CMS Basic Local File Include Vulnerability

The following example URI is available:

http://www.example.com/index.php?p=/../../../../../../../../../../../../../../etc/passwd%00

Pulse CMS Basic Local File Include Vulnerability

Solution:
Reportedly, the issue is fixed in version 1.2.9, but Symantec has not confirmed this. Please contact the vendor for more information.

Pulse CMS Basic Local File Include Vulnerability

References:

• Mitre Corporation (Mitre)
  
• Pulse CMS Homepage (Pulse CMS)
  
• Uncompiled.com (uncompiled.com)