Free Articles Directory Page Parameter Directory Remote File Include Vulnerability
BID:17183
Info
Free Articles Directory Page Parameter Directory Remote File Include Vulnerability
| Bugtraq ID: | 17183 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 22 2006 12:00AM |
| Updated: | Mar 22 2006 04:54PM |
| Credit: | Botan, Patriotic Hackers is credited with the discovery of this vulnerability. |
| Vulnerable: |
99articles.com Free Articles Directory 0 |
| Not Vulnerable: | |
Discussion
Free Articles Directory Page Parameter Directory Remote File Include Vulnerability
Free Articles Directory is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
All versions are considered vulnerable.
Free Articles Directory is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
All versions are considered vulnerable.
Exploit / POC
Free Articles Directory Page Parameter Directory Remote File Include Vulnerability
This issue can be exploited through use of a web client.
This issue can be exploited through use of a web client.
Solution / Fix
Free Articles Directory Page Parameter Directory Remote File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]
References
Free Articles Directory Page Parameter Directory Remote File Include Vulnerability
References:
References:
- Home Page (99articles.com)