Arctic Fox CMS Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	46392
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 15 2011 12:00AM
Updated:	Feb 15 2011 12:00AM
Credit:	High-Tech Bridge SA
Vulnerable:	Michael Armbruster Arctic Fox CMS 0.9.4
Not Vulnerable:

Arctic Fox CMS Multiple Information Disclosure Vulnerabilities

Arctic Fox CMS is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting this issue can allow attackers to gain access to sensitive information contained in the application's database. Successful exploits may lead to other attacks.

Arctic Fox CMS 0.9.4 is vulnerable; other versions may also be affected.

Arctic Fox CMS Multiple Information Disclosure Vulnerabilities

Attackers can exploit these issues with a web browser.

Arctic Fox CMS Multiple Information Disclosure Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Arctic Fox CMS Multiple Information Disclosure Vulnerabilities

References:

• Arctic Fox CMS Homepage (Michael Armbruster)
  
• HTB22833: Information Disclosure in Arctic Fox CMS (advisory)
  
• HTB22833: Information Disclosure in Arctic Fox CMS (High-Tech Bridge SA)