Detections
Analytics
XOOPS Multiple Modules spaw_control.class.php spaw_root Parameter Remote File Inclusion
high Nessus Plugin ID 25372
Language:
Synopsis
The remote web server contains a PHP script that is affected by a remote file include vulnerability.Description
The remote host is running a third-party module for XOOPS.The version of at least one such module installed on the remote host includes a copy of the SPAW PHP WYSIWYG editor control that fails to sanitize user-supplied input to the 'spaw_root' parameter of the 'spaw_control.class.php' script before using it to include PHP code. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker can exploit this issue to view arbitrary files on the remote host or possibly to execute arbitrary PHP code, perhaps from third-party hosts.
Solution
Disable PHP's 'register_globals' setting or contact the product's author to see if an upgrade exists.Plugin Details
Severity: High
ID: 25372
File Name: xoops_icontent_spaw_root_file_include.nasl
Version: 1.28
Type: remote
Family: CGI abuses
Published: 6/2/2007
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:xoops:xoops:xoops:icontent_module, cpe:/a:xoops:xoops:xoops:cjay_content_module, cpe:/a:xoops:xoops:xoops:xt-conteudo_module, cpe:/a:xoops:xoops:tinycontent_module, cpe:/a:xoops:xoops:wiwimod_module
Required KB Items: www/xoops
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Exploited by Nessus: true
Vulnerability Publication Date: 6/1/2007
Exploitable With
CANVAS (CANVAS)
Reference Information
CVE: CVE-2007-3057, CVE-2007-3220, CVE-2007-3221, CVE-2007-3237, CVE-2007-3289