|
Alex Multiple Products File Upload Vulnerability
|
|
Secunia Advisory:
|
SA32790
|
|
|
Release Date:
|
2008-11-20
|
|
Popularity:
|
1,186 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| Software: | Alex Article-Engine 1.x
Alex News-Engine 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
Batter has discovered a vulnerability in multiple Alex products, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to incorrect security restrictions on the "admin/includes/FCKeditor/editor/filemanager/browser/default/connectors/php/connector.php" script. This can be exploited to upload malicious PHP scripts with the e.g. .pht extension or with multiple extensions (e.g. "file.php.1") to the web root.
Successful exploitation requires a certain server configuration (e.g. an Apache server with the "mod_mime" module installed).
This vulnerability is confirmed in the following products:
- Article-Engine 1.3.0
- News-Engine 1.5.1
Solution:
Restrict access to the admin interface (e.g. via .htaccess).
Provided and/or discovered by:
Batter
Original Advisory:
http://milw0rm.com/exploits/7157
http://milw0rm.com/exploits/7158
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
