CVE-2006-6112: Medium severity Lifetype LifeType vulnerability
LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote attackers to obtain the installation path via a direct request to any of the scripts, as demonstrated by (a) bayesianfilter.class.php and (b) bootstrap.php, which leaks the path in an error message.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
Who can exploit this issue?
Any remote attacker can exploit it without authentication by directly requesting affected PHP scripts under the class/ or plugins/ directories.
What information is exposed?
The affected scripts can disclose the LifeType installation path through error messages. The reported examples are bayesianfilter.class.php and bootstrap.php.
Are default installations affected?
The available information identifies LifeType 1.0.x and 1.1.x as affected, but does not state whether every default installation exposes the vulnerable scripts.
What should be done?
Apply the available patch for affected LifeType installations. If patching cannot be done immediately, restrict direct web access to PHP scripts in the class/ and plugins/ directories where operationally feasible.