Info

Disclosure

Dec 02, 2005

Discovery

Unknown

Dates

Exploit

Dec 02, 2005

Solution

Unknown

Description

Sapid CMS contains a flaw that may allow a malicious user to upload files or images without being authenticated. The issue is caused due to missing access control on the "usr/system/insert_file.php", "usr/system/insert_image.php", "usr/system/insert_link.php", "usr/system/insert_qcfile.php", and "usr/system/edit.php" scripts.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Impact Unknown
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 1.2.3.03 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Sapid	Sapid Cms	1.2.3
		1.2.3.02
		1.2.3.03

References

Secunia Advisory ID: 17859
CVE ID: 2005-4007 (see also: NVD)
Related OSVDB ID: 22862
Other Advisory URL: http://sapid-club.com/en/viewtopic.php?p=586#586
Vendor Specific News/Changelog Entry: http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/21389

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Sapid

Sapid Cms

References

Credit