PHPRPC Library Remote Code Execution Vulnerability
BID:16833
Info
PHPRPC Library Remote Code Execution Vulnerability
| Bugtraq ID: | 16833 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 27 2006 12:00AM |
| Updated: | Mar 01 2006 08:26AM |
| Credit: | Discovered by James Bercegay. |
| Vulnerable: |
RunCMS RunCMS 1.2 RunCMS RunCMS 1.1 A RunCMS RunCMS 1.1 RunCMS RunCMS 1.3.a5 RunCMS RunCMS 1.3.a2 RunCMS RunCMS 1.3.a phpRPC phpRPC 0.9 phpRPC phpRPC 0.8 phpRPC phpRPC 0.7 |
| Not Vulnerable: | |
Discussion
PHPRPC Library Remote Code Execution Vulnerability
phpRPC is prone to a remote code-execution vulnerability. This issue exists because the library fails to adequately sanitize user-supplied data.
PHP scripts that implement the phpRPC library, such as RunCMS, may also be affected by this issue.
phpRPC is prone to a remote code-execution vulnerability. This issue exists because the library fails to adequately sanitize user-supplied data.
PHP scripts that implement the phpRPC library, such as RunCMS, may also be affected by this issue.
Exploit / POC
PHPRPC Library Remote Code Execution Vulnerability
This issue could be exploited with a Web browser.
This issue could be exploited with a Web browser.
Solution / Fix
PHPRPC Library Remote Code Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
PHPRPC Library Remote Code Execution Vulnerability
References:
References:
- Home Page (phpRPC)
- RunCms Homepage (RunCms)
- phpRPC Library Remote Code Execution (GulfTech Security Research