OSVDB ID: 35117

Title: PMB Services admin/quotas/main.inc.php class_path Variable Remote File Inclusion

Info

Disclosure

Mar 10, 2007

Discovery

Unknown

Dates

Exploit

Mar 10, 2007

Solution

Unknown

Description

PMB Services contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/quotas/main.inc.php script not properly sanitizing user input supplied to the 'class_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
OSVDB: Web Related

Solution

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: turn the register_globals PHP option to 'off'.

Products

SARL PMB Services

PMB Services

3.0.13

References

CVE ID: 2007-1415 (see also: NVD)
Bugtraq ID: 22895
ISS X-Force ID: 32890
Milw0rm: 3443
FrSIRT Advisory: ADV-2007-0917
Keyword: ECHO_ADV_68$2007
Other Advisory URL: http://advisories.echo.or.id/adv/adv68-K-159-2007.txt
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-03/0101.html
Vendor URL: http://www.sigb.net/

Credit

M.Hasran Addahroni - eufratogmail.com - K-159 Echo

Direct URL: http://osvdb.org/36218