Some vulnerabilities have been reported in SweetRice, which can be exploited by malicious people to compromise a vulnerable system and bypass certain security restrictions.

1) Input passed to the "root_dir" parameter in _plugin/subscriber/inc/post.php and in as/lib/news_modify.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local and remote resources.

Successful exploitation requires that support for .htaccess files is disabled.

The vulnerabilities are confirmed in version 0.5.4. Other versions may also be affected.

2) Access to the enabled FCKeditor component is not properly restricted, which can be exploited to e.g upload files of certain types.

The security issue is confirmed in version 0.5.4 and reported in versions prior to 0.6.4. Other versions may also be affected.

Solution
Update to the latest version.

Provided and/or discovered by
1) cr4wl3r
2) ITSecTeam

Changelog
Further details available in Customer Area

Original Advisory
ITSecTeam:
http://www.itsecteam.com/en/vulnerabilities/vulnerability56.htm

Deep Links
Links available in Customer Area