PHP Pro Bid contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'includes/class_image.php' script not properly sanitizing user input supplied to the 'fileExtension' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified,
Uncoordinated Disclosure
OSVDB:
Web Related
Solution
Upgrade to version 6.05 (2009-03-23) or higher, as it has been reported to fix this vulnerability. Note that this flaw was fixed in the 2009-03-23 release without a change in version number. An upgrade is required as there are no known workarounds.
