Maia Mailguard login.php lang Parameter Local File Inclusion

NASLDB: Maia Mailguard login.php lang Parameter Local File Inclusion

General

ID: 25673
Name: Maia Mailguard login.php lang Parameter Local File Inclusion

Summary: Tries to read a local file with Maia Mailguard

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Port: 80
Family: CGI abuses
Type: Remote

Description

The remote host is running Maia Mailguard, a spam and virus management
system written in PHP.

The version of Maia Mailguard installed on the remote host fails to
sanitize user input to the ‘lang’ parameter before using it to include
PHP code in ‘login.php’. Regardless of PHP’s ‘register_globals’
setting, an unauthenticated, remote attacker may be able to exploit
this issue to view arbitrary files or to execute arbitrary PHP code on
the remote host, subject to the privileges of the web server user id.