Limonade framework 'limonade.php' Local File Disclosure Vulnerability

Bugtraq ID:	63771
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 17 2013 12:00AM
Updated:	Nov 17 2013 12:00AM
Credit:	Yashar shahinzadeh
Vulnerable:	Limonade Limonade 3.0
Not Vulnerable:

Limonade framework 'limonade.php' Local File Disclosure Vulnerability

Limonade framework is prone to a local file-disclosure vulnerability because it fails to sanitize user-supplied input.

An attacker may leverage this issue to obtain sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.

Limonade framework 3.0 vulnerable; other versions may also be affected.

Limonade framework 'limonade.php' Local File Disclosure Vulnerability

Attackers can exploit this issue using a browser.

The following exploit code is available:

• /data/vulnerabilities/exploits/63771.php.txt

Limonade framework 'limonade.php' Local File Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Limonade framework 'limonade.php' Local File Disclosure Vulnerability

References:

• Limonade framework Homepage (Limonade)