G4N0K has reported multiple vulnerabilities in VideoScript, which can be exploited by malicious people to bypass certain security restrictions and malicious users to compromise a vulnerable system.

1) The vulnerability is caused due to the application not properly restricting access to the "admin/cp.php" script. This can potentially be exploited to change passwords by posting new password information to the admin/cp.php script directly.

2) Input passed to the "dbhost", "dbname", "dbuser" and "dbpass" parameters in admin/homeset.php (when "SubmitDB" is set to "Submit") is not properly sanitised before being written to a file. This can be exploited to execute arbitrary PHP by entering PHP code in the database configuration form.

These vulnerabilities are reported in version 4.0.1.50. Other versions may also be affected.

Solution
Restrict access to the admin interface (e.g. via .htaccess).
Further details available in Customer Area

Provided and/or discovered by
G4N0K

Changelog
Further details available in Customer Area

Original Advisory
1) http://www.milw0rm.com/exploits/7149
2) http://www.milw0rm.com/exploits/7211

Deep Links
Links available in Customer Area