Secunia

A vulnerability has been identified in Webfroot Shoutbox allowing malicious people to include arbitrary code or conduct directory traversal.

The problem is that the "conf" parameter isn't verified properly, in version 2.31 it was possible to include arbitrary PHP code from a remote server, the developer has changed this in version 2.32 so that the character ":" is stripped. This prevents malicious people from including data from remote as they can't supply "http://", however, they may still use character sequences like "../" allowing directory traversal. Any file which the webserver process got read access to may then be retrieved.

Injection of arbitrary code may still be possible in version 2.32 if an attacker is able to inject PHP code into log files (e.g. Apache logs) or other files on the system.

Solution
Edit the source code so that user input is properly verified.

Provided and/or discovered by
pokleyzz

Deep Links
Links available in Customer Area