vendor:
LightOpenCMS
by:
Jose Luis Gongora Fernandez (a.k.a) JosS
7,5
CVSS
HIGH
Local File Inclusion
22
CWE
Product Name: LightOpenCMS
Affected Version From: 0.1
Affected Version To: 0.1
Patch Exists: NO
Related CWE: N/A
CPE: a:lightopencms:lightopencms:0.1
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2009
LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability
LightOpenCMS 0.1 is vulnerable to a local file inclusion vulnerability due to a lack of sanitization of user-supplied input. The vulnerability exists in the 'smarty.php' script, which is used to include the Smarty library. The script uses the 'cwd' parameter to define the path to the Smarty library, which is not properly sanitized before being used. This can be exploited to include arbitrary files from local resources via directory traversal sequences and URL-encoded NULL bytes. Successful exploitation requires that 'register_globals' is set to 'On' in the 'php.ini' configuration file.
Mitigation:
User input should be properly sanitized and validated before being used in the application.
