OSVDB ID: 11535

Title: JAF CMS config.php Arbitrary Local File Inclusion

Info

Disclosure
Nov 08, 2004

Discovery
Nov 08, 2004

Dates

Exploit
Nov 08, 2004

Solution
Unknown

Description

 JAF CMS allows a remote attacker to include arbitrary local files. Input given to the "show" parameter of "config.php" is not properly sanitized before it is referenced to include a file. This vulnerability can be leveraged to include arbitrary files from the local system, resulting in information disclosure in the case of text files and script execution in the case of php scripts.

Classification

 Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Exploit: Exploit Available
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

 Upgrade to the most recent release of version 3.0 RC or more recent. Previous release of 3.0 RC are vulnerable. If you are unsure which distribution of 3.0 RC you are using, upgrade.

Products

Salims Softhouse

JAF CMS

 1.0
1.5
2.0
2.0.5
2.1.0
2.5
3.0 RC

References

Credit
  • y3dips - y3dipsBrand New Doo Dooecho.or.id -


Direct URL: http://osvdb.org/36218