The host is running LibLime Koha and is prone to local file inclusion vulnerability.

Successful exploitation will allow remote attackers to obtain potentially sensitive information and execute arbitrary local scripts in the context of the Web server process. Impact Level: Application

Upgrade to version 4.5 Build 4500 or higher, For updates refer to http://www.koha.org

The flaw is due to the cgi-bin/opac/opac-main.pl script not properly sanitizing user input supplied to the cgi-bin/koha/mainpage.pl script via the 'KohaOpacLanguage' cookie. This can be exploited to include arbitrary files from local resources via directory traversal attacks and URL-encoded NULL bytes.

LibLime Koha versions 4.02.06 and prior.

• http://osvdb.org/show/osvdb/77322
• http://secunia.com/advisories/46980/
• http://www.exploit-db.com/exploits/18153
• http://www.vigasis.com/en/?guncel_guvenlik=LibLime%20Koha%20%3C=%204.2%20Local%20File%20Inclusion%20Vulnerability&lnk=exploits/18153

---

Updated on 2015-03-25