OSVDB ID: 24753

Title: RechnungsZentrale V2 mod/authent.php4 rootpath Parameter Remote File Inclusion

Info

Disclosure

Apr 18, 2006

Discovery

Unknown

Dates

Exploit

Apr 18, 2006

Solution

Unknown

Description

RechnungsZentrale V2 contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to mod/authent.php4 not properly sanitizing user input supplied to the 'rootpath' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Nfec

RechnungsZentrale V2

1.1.3

References

Bugtraq ID: 17589
Secunia Advisory ID: 19728
CVE ID: 2006-1955 (see also: NVD)
Related OSVDB ID: 24752
ISS X-Force ID: 25912
VUPEN Advisory: ADV-2006-1425
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html
Other Advisory URL: http://www.g-0.org/code/rz2-adv.html
Vendor URL: http://www.nfec.de/

Credit

GroundZero Security Research and Software Development - infog-0.org - GroundZero Security Research and Software Development

Direct URL: http://osvdb.org/24753