OSVDB ID: 28149

Title: Zen Cart autoload_func.php autoLoadConfig[999][0][loadFile] Parameter Remote File Inclusion

Info

Disclosure

Aug 15, 2006

Discovery

Unknown

Dates

Exploit

Aug 15, 2006

Solution

Unknown

Description

Zen Cart contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to autoload_func.php not properly sanitizing user input supplied to the 'autoLoadConfig[999][0][loadFile]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, the vendor has released a patch to address this vulnerability.

Products

Zen Cart

1.3.0.2

References

Security Tracker: 1016707
Bugtraq ID: 19543
CVE ID: 2006-4215 (see also: NVD)
Secunia Advisory ID: 21484
Related OSVDB ID: 28144 28145 28146 28147 28148
ISS X-Force ID: 28394
VUPEN Advisory: ADV-2006-3283
Other Advisory URL: http://www.gulftech.org/?node=research&article_id=00109-08152006
Vendor URL: http://www.zen-cart.com/
Vendor Specific Solution URL: http://www.zen-cart.com/forum/showthread.php?t=43579

Credit

James Bercegay - securitygulftech.org - GulfTech Security Research

Direct URL: http://osvdb.org/28149