HTTP: phpSecurePages cfgProgDir Parameter Remote File Inclusion

This signature detects attempts to exploit a known remote file inclusion vulnerability in phpSecurePages. It is due to insufficient validation of user-supplied input. A remote attacker can exploit this by enticing a target to open a malicious URL link. A successful attack can result in arbitrary code execution and loss of sensitive information.

Extended Description

phpSecurePages is a PHP module to secures pages with a login name and password. An input validation error exists that could enable remote users to cause the 'interface.php' script used by phpSecurePages to be loaded from an arbitrary location. The problem occurs when the 'cfgProgPath' variable is submitted as part of query element is submitted as part of a request. As a result, it is possible for a remote user to specify the URL of a site containing a malicious 'interface.php' file as the 'cfgProgPath' variable. This will cause any code in the file to be executed by the checklogin.php script on the site running phpSecurePages, with the privileges of the webserver.

Affected Products

Phpsecurepages phpsecurepages

References

BugTraq: 2970

CVE: CVE-2001-1468

Short Name

HTTP:PHP:PHPSECUREPAGE-RFI

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: phpSecurePages cfgProgDir Parameter Remote File Inclusion

Extended Description

Affected Products

References

Found a potential security threat?