Ansilove Multiple Input Validation Vulnerabilities
BID:16603
Info
Ansilove Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 16603 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 13 2006 12:00AM |
| Updated: | Feb 13 2006 09:38PM |
| Credit: | Announced by the vendor. |
| Vulnerable: |
Ansilove Ansilove 1.02 Ansilove Ansilove 1.01 |
| Not Vulnerable: |
Ansilove Ansilove 1.03 |
Discussion
Ansilove Multiple Input Validation Vulnerabilities
Ansilove is prone to multiple input-validation vulnerabilities. These issues could be exploited to obtain sensitive information or upload arbitrary scripts. Due to a missing '.htaccess' file in the upload directory, the uploaded scripts may be accessed directly and executed.
Ansilove versions prior to 1.03 are vulnerable to these issues.
Ansilove is prone to multiple input-validation vulnerabilities. These issues could be exploited to obtain sensitive information or upload arbitrary scripts. Due to a missing '.htaccess' file in the upload directory, the uploaded scripts may be accessed directly and executed.
Ansilove versions prior to 1.03 are vulnerable to these issues.
Exploit / POC
Ansilove Multiple Input Validation Vulnerabilities
An exploit is not required.
An exploit is not required.
Solution / Fix
Ansilove Multiple Input Validation Vulnerabilities
Solution:
A fixed version is available:
Ansilove Ansilove 1.01
Ansilove Ansilove 1.02
Solution:
A fixed version is available:
Ansilove Ansilove 1.01
-
Ansilove ansilove-php-1.03.tar.gz
http://prdownloads.sourceforge.net/ansilove/ansilove-php-1.03.tar.gz?d ownload
Ansilove Ansilove 1.02
-
Ansilove ansilove-php-1.03.tar.gz
http://prdownloads.sourceforge.net/ansilove/ansilove-php-1.03.tar.gz?d ownload