Kubix connect.php information disclosure
| kubix-connect-info-disclosure (30572) |  Medium Risk |
Description:
Kubix could allow a remote attacker to obtain sensitive information. An attacker with a valid administrative ID could send a specially-crafted URL request to the adm_index.php script using the mod parameter to download arbitrary files from the system. An attacker could use this information to launch further attacks against the affected system.
Platforms Affected:
- Kubix, Kubix 0.7 and prior
Remedy:
No remedy available as of June 27, 2009.
Consequences:
Obtain Information
References:
- Kubix Web site, Kubix at http://kubixproject.net/.
- BID-21352: Kubix CMS Multiple Input Validation Vulnerabilities
- CVE-2006-7117: Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via .. sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via .. sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php.
Reported:
Nov 29, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net