Secunia

Dr Max Virus has discovered a vulnerability in the mx_newssuite module for MxBB Portal, which can be exploited by malicious people to compromise vulnerable systems.

Input passed to the "mx_root_path" parameter in includes/newssuite_constants.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources.

Successful exploitation requires that "register_globals" is enabled.

The vulnerability is confirmed in version 1.03. Other versions may also be affected.

Solution
Edit the source code to ensure that input is properly verified.

Provided and/or discovered by
Dr Max Virus

Changelog
Further details available in Customer Area

Original Advisory
http://www.milw0rm.com/exploits/2925

Deep Links
Links available in Customer Area