| tellmatic "tm_includepath" File Inclusion Vulnerabilities |
|
|
|
| Written by Marcelo Almeida (Vympel) | ||||
| Monday, 03 December 2007 | ||||
|
ShAy6oOoN has discovered some vulnerabilities in tellmatic, which can
be exploited by malicious people to compromise a vulnerable system. Input passed to the parameter "tm_includepath" in include/Classes.inc.php, include/statistic.inc.php, include/status.inc.php, include/status_top_x.inc.php, and include/libchart-1.1/libcharinclude/libchart-1.1/libchart.phpt.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or remote resources...
Successful exploitation requires that "register_globals" is enabled.
Powered by a Zone-H(ified) version of AkoComment 3.0! DISCLAIMER: Forum postings are the opinion of the posting author alone, and should not be taken as the opinion of Zone-h. The author is entirely and solely responsible for all content that he/she uploads, posts, or otherwise transmits via the website. Zone-h is not responsible for such content. However, Zone-h shall have the right, but not the obligation, to delete, move, or edit any content that violates this agreement or is otherwise objectionable as determined by Zone-h in its sole discretion and without notice. |
||||
| < Prev | Next > |
|---|
