Sammy Forgit has discovered a vulnerability in Eclydre Web Manager, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to the administrator/action/upload.php script improperly validating uploaded files, which can be exploited to execute arbitrary PHP code by uploading a PHP file with e.g. an appended ".gif" file extension.

Successful exploitation requires that Apache is not configured to handle the mime-type for media files with e.g. a ".gif" extension (Configured to handle by default).

The vulnerability is confirmed in version 2.6.8. Other versions may also be affected.

Solution
No official solution is currently available.

Provided and/or discovered by
Sammy Forgyt, OpenSysCom.

Original Advisory
http://www.opensyscom.fr/Actualites/eclydre-web-manager-arbitrary-file-upload-vulnerability.html

Deep Links
Links available to Secunia VIM customers