GoLd_M has discovered two vulnerabilities in Trionic Cite, which can be exploited by malicious people to disclose sensitive information or to compromise a vulnerable system.

Input passed to the "bField[bf_data]" parameter in interface/editors/-custom.php and interface/editors/custom.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources.

Successful exploitation requires that "register_globals" is enabled.

The vulnerabilities are confirmed in version 1.2-rev9. Other versions may also be affected.

Solution
Edit the source code to ensure that input is properly verified.

Provided and/or discovered by
GoLd_M

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/4485

Deep Links
Links available to Secunia VIM customers