Bigace 1.8.2 (GLOBALS) Remote File Inclusion Key Information Date: 2006.08.29 Credit: Vampire Risk: High CVE: CVE-2006-4423 CWE: CWE-Other CVSS Scores Base Score: 7.5/10 Exploit Range: Remote Impact Subscore: 6.4/10 Exploitability Subscore: 10/10 Confidentiality Impact: Partial Authentication: No required Integrity Impact: Partial Availability Impact: Partial Affected Software Application: Bigace Version: 1.8.2 URL: http://bigace.sourceforge.net Vulnerability The vulnerability lies in the following files: download.cmd.php admin.cmd.php upload_form.php These files improperly handle the variable, leading to Remote File Inclusion. Exploit Example exploit URLs: Solution Sanitize the variable in the following files: download.cmd.php admin.cmd.php item_main.php upload_form.php