FlashBB Remote File Include Vulnerability
BID:18456
Info
FlashBB Remote File Include Vulnerability
| Bugtraq ID: | 18456 |
| Class: | Access Validation Error |
| CVE: |
CVE-2006-7032 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 15 2006 12:00AM |
| Updated: | Jul 06 2016 01:33PM |
| Credit: | Telo Ganyong is credited with discovering this vulnerability. |
| Vulnerable: |
TUFaT FlashBB 1.1.5 |
| Not Vulnerable: | |
Discussion
FlashBB Remote File Include Vulnerability
FlashBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application.
An attacker may leverage this issue to have an arbitrary remote file containing malicious script code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
FlashBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application.
An attacker may leverage this issue to have an arbitrary remote file containing malicious script code execute in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible.
Exploit / POC
FlashBB Remote File Include Vulnerability
This vulnerability can be exploited using a web browser.
This vulnerability can be exploited using a web browser.
Solution / Fix
FlashBB Remote File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
FlashBB Remote File Include Vulnerability
References:
References: