Secunia

EgiX has discovered a vulnerability in LANAI CMS, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the handling of file uploads in include/fckeditor/editor/filemanager/upload/php/upload.php, when a file name has multiple file extensions. This can be exploited to upload malicious script files inside the web root (e.g. PHP scripts).

Successful exploitation requires a specific server configuration (e.g. an Apache server with the "mod_mime" module installed).

This is related to:
SA27123

The vulnerability is confirmed in version 1.2.16. Other versions may also be affected.

Solution
Restrict access to the "include/fckeditor/editor/filemanager/upload/php/upload.php" script (e.g. with ".htaccess").

Provided and/or discovered by
EgiX

Original Advisory
http://milw0rm.com/exploits/5618

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area