vendor:
Web Server Creator
by:
indoushka
8,8
CVSS
HIGH
Directory Traversal, XSS, RFI
22, 79, 98
CWE
Product Name: Web Server Creator
Affected Version From: 0.1
Affected Version To: 0.1
Patch Exists: NO
Related CWE: N/A
CPE: a:comscripts:web_server_creator:0.1
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux
2003
Web Server Creator – Web Portal v 0.1 Multi Vulnerability
The vulnerability allows an attacker to traverse directories and execute malicious code on the vulnerable server. An attacker can send a specially crafted HTTP request containing directory traversal strings (e.g. ../../../../../../../../boot.ini) to the vulnerable server in order to traverse directories and read sensitive files. Additionally, an attacker can inject malicious JavaScript code into the vulnerable web application via the 'pg' parameter in the 'index.php' script. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Finally, an attacker can exploit the 'path' parameter in the 'form.php' script to include arbitrary remote files from external sources.
Mitigation:
Input validation should be used to prevent directory traversal attacks. Additionally, HTML output should be properly encoded to prevent XSS attacks. Finally, remote file inclusion should be prevented by using a whitelist of allowed files.
