Phorum common.php ForumLang Parameter Traversal Arbitrary File Access

medium Nessus Plugin ID 10593

Synopsis

The remote web server contains a PHP script that suffers from an information disclosure flaw.

Description

The version of Phorum installed on the remote host lets an attacker read arbitrary files on the affected host with the privileges of the http daemon because it fails to filter input to the 'ForumLang' parameter of the 'support/common.php' script of directory traversal sequences.

Solution

Upgrade to Phorum 3.2.8 or later.

Plugin Details

Severity: Medium

ID: 10593

File Name: phorum.nasl

Version: 1.34

Type: remote

Family: CGI abuses

Published: 1/9/2001

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:phorum:phorum

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: No exploit is required

Reference Information

BID: 1997

Detections

Analytics