----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
Hot or Not Clone Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA28261

VERIFY ADVISORY:
http://secunia.com/advisories/28261/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Exposure of sensitive information, System access

WHERE:
>From remote

SOFTWARE:
Hot or Not Clone
http://secunia.com/product/17082/

DESCRIPTION:
RoMaNcYxHaCkEr has reported some vulnerabilities in Hot or Not Clone,
which can be exploited by malicious people to bypass certain security
restrictions, disclose sensitive information, or to compromise a
vulnerable system.

1) Access to control/backup/backup.php is not properly checked, which
can be exploited to download database backups and to e.g. disclose the
password of the administrative user.

2) The file type of uploaded files is not properly verified in
control/sitebanners/upload_banners.php before the file is being
stored in a web-accessible directory. This can be exploited to upload
arbitrary files (e.g. PHP files).

3) Access to control/sitebanners/upload_banners.php is not properly
checked, which can be exploited to e.g. upload and execute arbitrary
PHP code.

SOLUTION:
Restrict access to the "control" and the "backup" directory (e.g. via
a ".htaccess" file).

PROVIDED AND/OR DISCOVERED BY:
RoMaNcYxHaCkEr

ORIGINAL ADVISORY:
http://milw0rm.com/exploits/4804

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------