Siteframe Siteframe.php Remote File Include Vulnerability

Bugtraq ID:	13928
Class:	Input Validation Error
CVE:	CVE-2005-1965
Remote:	Yes
Local:	No
Published:	Jun 10 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	Discovery is credited to PRI[l, MOROCCO.
Vulnerable:	Siteframe Siteframe 3.2 p5 Siteframe Siteframe 3.1.9 Siteframe Siteframe 3.1.8 BETA Siteframe Siteframe 3.1.6 Siteframe Siteframe 3.1.4 Siteframe Siteframe 3.1.2 Siteframe Siteframe 3.1.1 Siteframe Siteframe 3.1 Siteframe Siteframe 3.0.2 Siteframe Siteframe 3.0.1
Not Vulnerable:

Siteframe Siteframe.php Remote File Include Vulnerability

Siteframe is prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'siteframe.php' script.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

Siteframe Siteframe.php Remote File Include Vulnerability

An exploit is not required.

Siteframe Siteframe.php Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Siteframe Siteframe.php Remote File Include Vulnerability

References:

• Siteframe Homepage (Siteframe)