Pluck CMS 4.7 – Multiple Local File Inclusion / File Disclosure Vulnerabilities

• Exploit Database
• 16 阅读

• 作者： Bl4k3
  日期： 2011-09-08
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/36129/

• source: https://www.securityfocus.com/bid/49525/info
  
  Pluck is prone to multiple file-include and a file-disclosure vulnerabilities because it fails to properly sanitize user-supplied input.
  
  An attacker can exploit the local file-include vulnerabilities using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.
  
  An attacker can exploit local file-disclosure vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.
  
  Pluck 4.7 is vulnerable; other versions may also be affected. 
  
  1-File Inclusion:
   
  include(ALBUMS_DIR.'/'.$_GET['album'].'.php');
   
  Require:
   
  if (file_exists(ALBUMS_DIR.'/'.$_GET['album'].'.php')) {
  function albums_pages_site() {
   
  2-File Inclusion
   
  include (ALBUMS_DIR.'/'.$album['seoname'].'.php');
  foreach ($albums as $album) {
  $albums= albums_get_albums();
   
  3-File Disclosure
   
  echo readfile('../../settings/modules/albums/'.$image);
  $image = $_GET['image'];
   
  requires:
   
  if (file_exists('../../settings/modules/albums/'.$image)) {