OSVDB ID: 57782

Title: FreeSchool /calendario/cal_save.php CLASSPATH Parameter Remote File Inclusion

Info

Disclosure

Sep 03, 2009

Discovery

Unknown

Dates

Exploit

Sep 03, 2009

Solution

Unknown

Description

FreeSchool contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the '/calendario/cal_save.php' script not properly sanitizing user input supplied to the 'CLASSPATH' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Public
Disclosure: Third-party Verified, Uncoordinated Disclosure
OSVDB: Web Related

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

Centro Provinciale Servizi Scolastici

FreeSchool

1.1.0

References

CVE ID: 2009-4471 (see also: NVD)
Secunia Advisory ID: 36605
ISS X-Force ID: 53017
Related OSVDB ID: 57763 57764 57765 57766 57767 57768 57769 57770 57771 57772 57773 57774 57775 57776 57777 57778 57779 57780 57781 57783 57784 57785
Milw0rm: 9582
Exploit Database: 9582
VUPEN Advisory: ADV-2009-2535
Vendor URL: http://freeschool.istruzionego.eu/
http://sourceforge.net/projects/freeschool/files/

Credit

cr4wl3r - cr4wl3rlinuxmail.org -

Direct URL: http://osvdb.org/57782