RETIRED: SPAW PHP Editor Multiple Remote File Include Vulnerabilities

Bugtraq ID:	19603
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 19 2006 12:00AM
Updated:	Aug 21 2006 10:24PM
Credit:	Discovery is credited to botan.
Vulnerable:	SOLMETRA SPAW PHP Editor 1.0.7 SOLMETRA SPAW PHP Editor 1.0.6
Not Vulnerable:

RETIRED: SPAW PHP Editor Multiple Remote File Include Vulnerabilities

SPAW PHP Editor is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input.

A successful exploit may allow an attacker to execute remote PHP code in the context of the web server process. This may allow the attacker to compromise the application or to gain access to the underlying system.

This BID has been retired.

RETIRED: SPAW PHP Editor Multiple Remote File Include Vulnerabilities

This issue may be exploited with a web-client.

RETIRED: SPAW PHP Editor Multiple Remote File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

This BID has been retired.

RETIRED: SPAW PHP Editor Multiple Remote File Include Vulnerabilities

References:

• SPAW Editor Homepage (SOLMETRA)
  
• [Kurdish Security # 23] Spaw Editor Remote Include Vulnerability ([email protected])