sflog! 'uploadContent.inc.php' Arbitrary File Upload Vulnerability
BID:54335
Info
sflog! 'uploadContent.inc.php' Arbitrary File Upload Vulnerability
| Bugtraq ID: | 54335 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 06 2012 12:00AM |
| Updated: | Sep 07 2012 10:19PM |
| Credit: | dun |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
sflog! 'uploadContent.inc.php' Arbitrary File Upload Vulnerability
sflog! is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
An attacker can exploit this issue to upload arbitrary code and execute it in the context of the web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.
sflog! 1.00 is vulnerable; other versions may also be affected.
NOTE: This BID was originally titled 'sflog! 'index.php' Arbitrary File Upload Vulnerability', but has been changed to better describe the underlying issue.
sflog! is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
An attacker can exploit this issue to upload arbitrary code and execute it in the context of the web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.
sflog! 1.00 is vulnerable; other versions may also be affected.
NOTE: This BID was originally titled 'sflog! 'index.php' Arbitrary File Upload Vulnerability', but has been changed to better describe the underlying issue.
Exploit / POC
sflog! 'uploadContent.inc.php' Arbitrary File Upload Vulnerability
An attacker can exploit the issue using a browser.
The following exploit code is available:
An attacker can exploit the issue using a browser.
The following exploit code is available:
Solution / Fix
sflog! 'uploadContent.inc.php' Arbitrary File Upload Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].