Detections
Analytics
TikiWiki < 1.9.8.2 Multiple Scripts Local File Inclusion
medium Nessus Plugin ID 27575
Language:
Synopsis
The remote web server contains a PHP script that is susceptible to one or more local file include attacks.Description
The remote host is running TikiWiki, an open source wiki application written in PHP.The version of TikiWiki installed on the remote host fails to sanitize input to the 'error_handler_file' and/or 'local_php' parameters before using them to include PHP code. Provided PHP's 'register_globals' setting is enabled, an unauthenticated, remote attacker may be able to exploit this issue to view arbitrary files or to execute arbitrary PHP code on the remote host, subject to the privileges of the web server user id.
Solution
Upgrade to TikiWiki version 1.9.8.1 or later.See Also
https://www.securityfocus.com/archive/1/482801/30/0/threaded
Plugin Details
Severity: Medium
ID: 27575
File Name: tikiwiki_1_9_8_2_file_includes.nasl
Version: 1.19
Type: remote
Family: CGI abuses
Published: 10/26/2007
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: Medium
Base Score: 5.1
Temporal Score: 4
Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:tikiwiki:tikiwiki
Required KB Items: www/PHP, www/tikiwiki
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Reference Information
CVE: CVE-2007-5684
BID: 26211
CWE: 22