OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include

From: Carsten Eilers (ceilers-listsgmx.de)
Date: Wed Aug 23 2006 - 17:51:34 CDT

Hi,

h4ck3riranyahoo.com schrieb am Sun, 20 Aug 2006 07:52:31 +0000:

>> ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include
>
>----------------------------------------------
>
>>
>
>>Source :
>
>> include($tcms_administer_site.'/tcms_global/database.php')

This is from index.php?

Near the top of this script the variable is initalized:

| include_once('site.php');
| $tcms_administer_site = $tcms_site[0]['path'];

After that I found no way to manipulate $tcms_administer_site,
so I see no vulnerability.

Regards
  Carsten

--
Dipl.-Inform. Carsten Eilers
IT-Sicherheit und Datenschutz

<http://www.ceilers-it.de>