what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Open Source CERT Security Advisory 2010.3

Open Source CERT Security Advisory 2010.3
Posted Sep 18, 2010
Authored by Andrea Barisani, Open Source CERT | Site ocert.org

Free Simple CMS versions 1.0 and below suffer from a remote file inclusion vulnerability.

tags | advisory, remote, file inclusion
SHA-256 | 1f0bab6915c38374d04f3409e9cca75897c9d33487ecd6ea9df084d256e824ca

Open Source CERT Security Advisory 2010.3

Change Mirror Download

#2010-003 Free Simple CMS path sanitization errors

Description:

Free Simple CMS, an open source content management system, suffers from
remote file inclusion vulnerabilities.

Insufficient path sanitization on several query string parameters leads to
inclusion of arbitrary files from remote sources, this could be exploited to
execute arbitrary command or code.

The vulnerable URLs are similar to the one referenced in a previously
disclosed file inclusion vulnerability affecting the same version of the
software (see References). It has been discovered that 'body', 'footer',
'header', 'menu_left', 'menu_right' are also vulnerable to remote file
inclusion.

Affected version:

Free Simple CMS <= 1.0

Fixed version:

Free Simple CMS, N/A

Credit: vulnerability report received from Evan Pitstick, SecureWorks.

CVE: N/A

Timeline:

2010-08-20: vulnerability report received
2010-08-22: contacted freesimplecms maintainer
2010-08-24: maintainer replies, vulnerability report is provided
2010-09-13: due to lack of feedback oCERT asks reporter to disclose the
issue
2010-09-14: reporter agrees to disclosure
2010-09-17: oCERT advisory published

References:
http://packetstormsecurity.org/1008-exploits/freesimplesoftware-rfi.txt
http://secunia.com/advisories/41001
http://osvdb.org/67329

Permalink:
http://www.ocert.org/advisories/ocert-2010-003.html

--
Andrea Barisani | Founder & Project Coordinator
oCERT | Open Source Computer Emergency Response Team

<lcars@ocert.org> http://www.ocert.org
0x864C9B9E 0A76 074A 02CD E989 CE7F AC3F DA47 578E 864C 9B9E
"Pluralitas non est ponenda sine necessitate"
Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    17 Files
  • 21
    May 21st
    18 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close