Pluck 4.7 multiple defects and repair

Title: Pluck 4.7 multiple vulnerabilities

Author: Bl4k3 www.2cto.com
: Http://www.pluck-cms.org /? File = download
Test version: 4.7

 

1-File Inclusion:

Include (ALBUMS_DIR. '/'. $ _ GET ['alipay']. '. php ');

Require:

If (file_exists (ALBUMS_DIR. '/'. $ _ GET ['alipay']. '. php ')){

Function albums_pages_site (){

2-File Inclusion

Include (ALBUMS_DIR. '/'. $ album ['seoname']. '. php ');

Foreach ($ albums as $ album ){

$ Albums = albums_get_albums ();

3-file Leakage

Echo readfile ('../settings/modules/albums/'. $ image );

$ Image = $ _ GET ['image'];

Requires:

If (file_exists ('../settings/modules/albums/'. $ image )){

There are also some lower-level defects

Fix:
Enhanced verification and filtering