Secunia

Some vulnerabilities have been reported in NPDS, which can be exploited by malicious people to disclose sensitive information or conduct cross-site scripting attacks.

1) Input passed to the "Default_Theme" parameter in footer.php is not properly sanitised before being used to include files. This can be exploited to include arbitrary files from local resources via directory traversal attacks.

Successful exploitation requires that "register_globals" is enabled.

2) Input passed to the "theme" parameter in themes/npds2004/footer.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in the context of an affected site.

Solution
The vulnerabilities are reportedly fixed in version 5.10 08.06.

Provided and/or discovered by
Jief

Deep Links
Links available in Customer Area