----------------------------------------------------------------------

Do you need accurate and reliable IDS / IPS / AV detection rules?

Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/

----------------------------------------------------------------------

TITLE:
TurnkeyForms Web Hosting Directory Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA32644

VERIFY ADVISORY:
http://secunia.com/advisories/32644/

CRITICAL:
Moderately critical

IMPACT:
Security Bypass, Exposure of sensitive information

WHERE:
>From remote

SOFTWARE:
TurnkeyForms Web Hosting Directory
http://secunia.com/advisories/product/20491/

DESCRIPTION:
G4N0K has reported some vulnerabilities in TurnkeyForms Web Hosting
Directory, which can be exploited by malicious people to bypass
certain security restrictions and disclose sensitive information.

1) The application authenticates access to the admin interface by
checking if a certain cookie exists. This can be exploited to gain
administrative access to the application by creating the cookie "adm"
and assigning it the value "1".

2) The application does not properly restrict access to the database
backup directory inside the webroot. This can be exploited to
download database backups by accessing the "admin/backup/db" file
directly.

SOLUTION:
Restrict access to the admin interface (e.g. via ".htaccess").

PROVIDED AND/OR DISCOVERED BY:
G4N0K

ORIGINAL ADVISORY:
http://milw0rm.com/exploits/7107

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------