Zenitel AlphaWeb XE Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in Zenitel AlphaWeb XE version 11.2.3.10. The issue arises in the amc_uploads.php component, allowing authenticated users to access sensitive files on the server.

Impact

Exploitation of this vulnerability leads to unauthorized access to local files, including sensitive information such as password hashes from the /etc/shadow file.

Reproduction

To reproduce this vulnerability, authenticate to the Zenitel AlphaWeb XE web application version 11.2.3.10 using the default credentials (username: 'admin', password: 'alphaadmin'). After logging in, navigate to the amc_uploads.php component with the 'action=readlog' parameter and specify a file path such as '/etc/passwd' or '/etc/shadow' to access the contents of these files.