James Bercegay has reported some vulnerabilities in Help Center Live, which can be exploited by malicious people to conduct cross-site scripting attacks, compromise a vulnerable system and disclose sensitive information.

1) Input passed to the "find" parameter in "index.php" isn't properly sanitised before being returned to the user. This can be exploited execute arbitrary HTML and script code in a user's browser session in context of a vulnerable site.

2) Input passed to the "HCL_path" parameter in "pipe.php" isn't properly verified, before it is used to include files. This can be exploited to include arbitrary files from external and local resources.

Successful exploitation requires that "register_globals" is enabled.

3) Input passed to the "SKIN_inner" parameter in "skin.php" isn't properly verified, before it is used to view files. This can be exploited to disclose arbitrary local files.

Successful exploitation requires that "register_globals" is enabled.

Solution
1) Edit the source code to ensure that input is properly sanitised.
Further details available in Customer Area

Provided and/or discovered by
James Bercegay, GulfTech Security Research Team

Original Advisory
http://www.gulftech.org/?node=research&article_id=00058-12242004

Deep Links
Links available in Customer Area