Pligg settemplate.php template Parameter Local File Inclusion

medium Nessus Plugin ID 33848

Language:

Synopsis

The remote web server contains a PHP application that is affected by a local file include vulnerability.

Description

The remote host is running Pligg, an open source content management system.

The installed version of Pligg fails to sanitize the 'template' cookie before using it in 'config.php' to include PHP code. An unauthenticated, remote attacker can exploit this issue to view arbitrary files or even execute arbitrary PHP code, subject to the privileges of the web server user id.

In addition, there are reportedly a number of other issues associated with this one including cross-site scripting, SQL injection and file enumeration. Nessus has not checked for them, though.

Solution

Upgrade to Pligg 9.9.5 or later.

Plugin Details

Severity: Medium

ID: 33848

File Name: pligg_cms_multiple_vulnerabilities.nasl

Version: 1.22

Type: remote

Family: CGI abuses

Published: 8/8/2008

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.5

CVSS v2

Risk Factor: Medium

Base Score: 5.1

Temporal Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:pligg:pligg_cms

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Exploited by Nessus: true

Reference Information

CVE: CVE-2008-7090

BID: 30458

CWE: 22

Detections

Analytics