W-Agora EditForm.PHP PHP Include Vulnerability

Bugtraq ID:	6463
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 22 2002 12:00AM
Updated:	Dec 22 2002 12:00AM
Credit:	Vulnerability discovery credited to xatr0z <[email protected]>.
Vulnerable:	W-Agora W-Agora 4.1.6
Not Vulnerable:

W-Agora EditForm.PHP PHP Include Vulnerability

W-Agora is a freely available, open source PHP forum software package. It is available for Unix and Linux systems.

A problem with W-Agora may make possible the execution of arbitrary commands.

It has been reported that W-Agora has a vulnerability in the handling of PHP includes. By placing a file on a local system, a user could cause the execution of commands in the file to be carried out in the context of the web server process. This would require an administrator clicking a link after having logged into to access the editform.php page.

W-Agora EditForm.PHP PHP Include Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

W-Agora EditForm.PHP PHP Include Vulnerability

Solution:
The vendor has stated that fixes will be available soon.

W-Agora EditForm.PHP PHP Include Vulnerability

References:

• W-Agora Homepage (W-Agora)
  
• Re: XSS and PHP include bug in W-Agora (Marc Druilhe )
  
• XSS and PHP include bug in W-Agora ("xatr0z" )