Uninitialized variables allow access to the Motorito CMS administration panel
Uninitialized variables that allow access to the Motorito CMS admin panel.
Antecedentes
Motorito is an online marketing tool used to manage website content, create content, decide which news stories appear on the homepage, update the product catalog, manage users, edit the menu, send emails, etc.
Description
The Motorito CMS does not initialize some of the variables it uses. Combined with a poor web server configuration (with the register_globals = on directive in php.ini), this allows a malicious user to compromise the web application and even the server itself: they can introduce new variables into a normal GET or POST request so that the application adopts them, thereby controlling its flow. Exploitation allows access to the CMS administration panel.
Business impact
An attacker can access the administration panel in authenticated mode, compromising the web application or even the server.
Affected systems
Tested on Motorito 2.0. Other versions may be affected.
Solución
The manufacturer reported its correction in November 2011.
Calendario de divulgación
References
The information contained within this advisory is supplied 'as-is' with no warranties or guarantees of fitness for use or otherwise. Internet Security Auditors accepts no responsibility for any damage caused by the use or misuse of this information.
Company based in Spain and Colombia, specializing in web application auditing, network security, penetration testing, and compliance implementation and assessment. Our clients include some of the largest finance, telecommunications, insurance, and ICT companies. A vendor-independent provider with in-depth experience since 2001. Our R&D efforts include vulnerability research, collaboration on open security projects, whitepapers, and participation in industry events.
Would you like us to review your product?
Contact usDo you need a security audit?
Tell us about your situation and our team will get in touch with you to provide guidance or schedule a technical call.
Request information
Our offices
Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)