Segue CMS themesettings.inc.php themesdir Parameter Remote File Inclusion

high Nessus Plugin ID 22922

Language:

Synopsis

The remote web server contains a PHP script that is affected by a remote file include issue.

Description

The remote web server is running Segue CMS, an open source content management system tailored for educational institutions.

The version of Segue CMS installed on the remote host fails to sanitize input to the 'themesdir' parameter before using it in the 'themes/program/themesettings.inc.php' script to include PHP code.
Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker can exploit this issue to view arbitrary files and execute arbitrary code, possibly taken from third-party hosts, on the remote host.

Solution

Update to version 1.5.9 or later.

Plugin Details

Severity: High

ID: 22922

File Name: segue_rfi.nasl

Version: 1.19

Type: remote

Family: CGI abuses

Published: 10/28/2006

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Vulnerability Publication Date: 10/20/2006

Reference Information

CVE: CVE-2006-5497

BID: 20640

Detections

Analytics