eduTrac 'showmask' Parameter Directory Traversal Vulnerability

Bugtraq ID:	64255
Class:	Input Validation Error
CVE:	CVE-2013-7097
Remote:	Yes
Local:	No
Published:	Dec 11 2013 12:00AM
Updated:	Jan 06 2014 12:40AM
Credit:	High-Tech Bridge Security Research Lab
Vulnerable:
Not Vulnerable:

eduTrac 'showmask' Parameter Directory Traversal Vulnerability

eduTrac is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to access arbitrary files that contain sensitive information. Information harvested may aid in launching further attacks.

eduTrac 1.1.1 is vulnerable; other versions may also be affected.

eduTrac 'showmask' Parameter Directory Traversal Vulnerability

An attacker can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/installer/overview.php?step=writeconfig&showmask=../../eduTrac/Config/constants.php

eduTrac 'showmask' Parameter Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

eduTrac 'showmask' Parameter Directory Traversal Vulnerability

References: