SNS Vulnerability

Up,Phpaw,05 Remote File Upload and Cross Site Scripting Vulnerabilities

Description

Multiple vulnerabilities have been identified in Up,Phpaw,05, which could be exploited by malicious users to gain knowledge of sensitive information or compromise a vulnerable system.
The first issue is caused by missing access validation within the "admin/filesup.php" script when adding authorized file extensions, which could allow authenticated users to upload PHP scripts via "upload.php" and execute arbitrary code with the privileges of the web server.
The second vulnerability is caused by input validation errors in the "ardguest.php" and "contact.php" scripts, which could be exploited by malicious users to conduct cross site scripting attacks.

Vulnerable Products

Vulnerable Software:
Up,Phpaw,05

Solution

CVE

References

http://www.exploit-db.com/exploits/10998

Vulnerability Manager Detection

IPS Protection

ASQ Engine alarm	Available Since
XSS - Prevention - GET : suspicious 'iframe' tag found in URL	3.2.0
XSS - Prevention - GET : suspicious tag with event found in URL	3.2.0
XSS - Prevention - GET : suspicious 'applet' tag found in URL	3.2.0
XSS - Phishing : suspicious 'div' tag found in URL	3.2.0
XSS - Prevention - GET : suspicious 'style' attribute found in URL	3.2.0
XSS - Phishing : suspicious 'a' tag found in URL	3.2.0
XSS - Prevention - GET : cookie access attempt using script language found in URL	3.2.0
XSS - Prevention - GET : suspicious 'embed' tag found in URL	3.2.0
XSS - Prevention - GET : suspicious 'object' tag found in URL	3.2.0
XSS - Phishing : suspicious 'form' tag found in URL	3.2.0
XSS - Prevention - GET : javascript code found in URL	3.2.0
XSS - Prevention - GET : evasion attempt using tag characters encoding in URL	3.2.0
XSS - Prevention - GET : suspicious 'style' tag found in URL	3.2.0
XSS - Phishing : suspicious 'link' tag found in URL	3.2.0
XSS - Prevention - GET : 'script' tag found in URL	3.2.0
XSS - Prevention - GET : 'location' javascript object found in URL	3.2.0
XSS - Prevention - GET : suspicious 'div' tag found in URL	3.2.0

Risk level

Moderate

Vulnerability First Public Report Date

2010-01-05

Target Type

Client

Possible exploit

Local & Remote