phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
BID:50328
Info
phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
| Bugtraq ID: | 50328 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 24 2011 12:00AM |
| Updated: | Oct 24 2011 12:00AM |
| Credit: | Alguien |
| Vulnerable: |
phpldapadmin phpldapadmin 0.9.4b |
| Not Vulnerable: | |
Discussion
phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
phpLDAPadmin is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker can exploit this issue to run malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. The issue can also be exploited to cause memory exhaustion through recursive inclusions, which will result in a denial-of-service condition.
phpLDAPadmin 0.9.4b is vulnerable; other versions may also be affected.
phpLDAPadmin is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
An attacker can exploit this issue to run malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. The issue can also be exploited to cause memory exhaustion through recursive inclusions, which will result in a denial-of-service condition.
phpLDAPadmin 0.9.4b is vulnerable; other versions may also be affected.
Exploit / POC
phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
An attacker can use a browser to exploit this issue.
The following exploit code is available:
An attacker can use a browser to exploit this issue.
The following exploit code is available:
Solution / Fix
phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
References:
References:
- phpldapadmin Homepage (phpldapadmin)