Secunia Security Advisory - G4N0K has reported some vulnerabilities in TurnkeyForms Web Hosting Directory, which can be exploited by malicious people to bypass certain security restrictions and disclose sensitive information.
00a797e6e27b082b074e5c18a9ff42a59b63fc8d486c869ff84bbc25e0e162b4
----------------------------------------------------------------------
Do you need accurate and reliable IDS / IPS / AV detection rules?
Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/
----------------------------------------------------------------------
TITLE:
TurnkeyForms Web Hosting Directory Multiple Vulnerabilities
SECUNIA ADVISORY ID:
SA32644
VERIFY ADVISORY:
http://secunia.com/advisories/32644/
CRITICAL:
Moderately critical
IMPACT:
Security Bypass, Exposure of sensitive information
WHERE:
>From remote
SOFTWARE:
TurnkeyForms Web Hosting Directory
http://secunia.com/advisories/product/20491/
DESCRIPTION:
G4N0K has reported some vulnerabilities in TurnkeyForms Web Hosting
Directory, which can be exploited by malicious people to bypass
certain security restrictions and disclose sensitive information.
1) The application authenticates access to the admin interface by
checking if a certain cookie exists. This can be exploited to gain
administrative access to the application by creating the cookie "adm"
and assigning it the value "1".
2) The application does not properly restrict access to the database
backup directory inside the webroot. This can be exploited to
download database backups by accessing the "admin/backup/db" file
directly.
SOLUTION:
Restrict access to the admin interface (e.g. via ".htaccess").
PROVIDED AND/OR DISCOVERED BY:
G4N0K
ORIGINAL ADVISORY:
http://milw0rm.com/exploits/7107
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------