VisualShapers ezContents Multiple Vulnerabilities
BID:5315
Info
VisualShapers ezContents Multiple Vulnerabilities
| Bugtraq ID: | 5315 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2002 12:00AM |
| Updated: | Jul 25 2002 12:00AM |
| Credit: | These vulnerabilities were reported by Ulf Harnhammar <[email protected]>. |
| Vulnerable: |
VisualShapers ezContents 1.41 VisualShapers ezContents 1.40 |
| Not Vulnerable: | |
Discussion
VisualShapers ezContents Multiple Vulnerabilities
VisualShapers ezContents is a website content management system based on PHP and MySQL. The software contains multiple vulnerabilities.
The first vulnerability occurs because ezContents does not check if an image file was actually uploaded or if the file information was performed through a POST. This could allow a malicious user to fool the server into treating any file that is readable by the webserver as an uploaded file.
The second vulnerability is a directory traversal issue. The Maintain Images function allows a user to escape the webroot by entering "../" sequences. The user can either list directories and contents or create subdirectories.
The third vulnerability allows a user to POST data to several scripts without being logged in.
The fourth issue involves HTML injection. ezContents allows a user to enter scripts that will execute when another user views the entry. This occurs because ezContents fails to sanitize user input.
The fifth issue is an SQL injection vulnerability.
VisualShapers ezContents is a website content management system based on PHP and MySQL. The software contains multiple vulnerabilities.
The first vulnerability occurs because ezContents does not check if an image file was actually uploaded or if the file information was performed through a POST. This could allow a malicious user to fool the server into treating any file that is readable by the webserver as an uploaded file.
The second vulnerability is a directory traversal issue. The Maintain Images function allows a user to escape the webroot by entering "../" sequences. The user can either list directories and contents or create subdirectories.
The third vulnerability allows a user to POST data to several scripts without being logged in.
The fourth issue involves HTML injection. ezContents allows a user to enter scripts that will execute when another user views the entry. This occurs because ezContents fails to sanitize user input.
The fifth issue is an SQL injection vulnerability.
Exploit / POC
VisualShapers ezContents Multiple Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
VisualShapers ezContents Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.