OSVDB ID: 19522

Title: Avi Alkalay contribute.cgi/contribute.pl template Variable Arbitrary File Retrieval

Info

Disclosure

Sep 12, 2005

Discovery

Sep 12, 2005

Dates

Exploit

Sep 25, 2005

Solution

Unknown

Description

Celular contribute.cgi or contribute.pl scripts contains a flaw that allows a remote attacker to traverse outside of the web path. The issue is due to the contribute.pl or contribute.cgi script not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the template variable. It's possible that multiple files can be read via the contribdir variable.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Confidentiality
Exploit: Exploit Public
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Avi Alkalay	contribute.pl	16 Jun 2002
Avi Alkalay	contribute.cgi	16 Jun 2002

References

Secunia Advisory ID: 16895
Related OSVDB ID: 19519 19520 19521 19522 19879
Vendor URL: http://www.alkalay.net/software/
Other Advisory URL: http://www.cirt.net/advisories/alkalay.shtml

Credit

Sullo - sullocirt.net - cirt.net

Direct URL: http://osvdb.org/19522