paNews 2.0.4b Multiple Input Validation Vulnerabilities

high Nessus Plugin ID 17574

Language:

Synopsis

The remote web server contains a PHP application that suffers from multiple flaws.

Description

The remote host is running a version of paNews that suffers from the following vulnerabilities:

- SQL Injection Issue in the 'login' method of includes/auth.php.
A remote attacker can leverage this vulnerability to add users with arbitrary privileges.

- Local Script Injection Vulnerability in includes/admin_setup.php.
A user defined to the system (see above) can inject arbitrary PHP code into paNews' config.php via the 'comments' and 'autapprove' parameters of the 'admin_setup.php' script.

Solution

Unknown at this time.

Plugin Details

Severity: High

ID: 17574

File Name: panews_input_vulns.nasl

Version: 1.14

Type: remote

Family: CGI abuses

Published: 3/18/2005

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: www/panews

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 3/2/2005

Reference Information

CVE: CVE-2005-0646, CVE-2005-0647

BID: 12687

Detections

Analytics