Detections
Analytics
Dolphin Multiple Scripts Remote File Inclusion
medium Nessus Plugin ID 33446
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple remote file include vulnerabilities.Description
The remote host is running Dolphin, a web-based social networking application written in PHP.The version of Dolphin installed on the remote host fails to sanitize user-supplied input to the 'dir[plugins]' parameter of 'plugins/safehtml/HTMLSax3.php' and 'plugins/safehtml/safehtml.php' scripts as well as the 'sIncPath' parameter of the 'ray/modules/global/inc/content.inc.php' script before using it to include PHP code. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker may be able to exploit this issue to view arbitrary files on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts.
Solution
Unknown at this time.Plugin Details
Severity: Medium
ID: 33446
File Name: dolphin_file_includes.nasl
Version: 1.20
Type: remote
Family: CGI abuses
Published: 7/9/2008
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:boonex:dolphin
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Reference Information
CVE: CVE-2008-3166, CVE-2008-3167
BID: 30136