CJ Tag Board User-Agent PHP Code Injection Vulnerability

Bugtraq ID:	19748
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 29 2006 12:00AM
Updated:	Dec 22 2006 12:02AM
Credit:	Secunia Research discovered this issue.
Vulnerable:	CJ Tag Board 3.0
Not Vulnerable:

CJ Tag Board User-Agent PHP Code Injection Vulnerability

CJ Tag Board is prone to a vulnerability that may allow remote attackers to inject arbitrary PHP code into scripts.

A successful attack may result in unauthorized access in the context of the server.

CJ Tag Board 3.0 is reported vulnerable; other versions may be affected as well.

CJ Tag Board User-Agent PHP Code Injection Vulnerability

Attackers can exploit this issue via a web client.

CJ Tag Board User-Agent PHP Code Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

CJ Tag Board User-Agent PHP Code Injection Vulnerability

References:

• Changes from 2.14.6 to 2.14.8 (MySource)
  
• MySource Classic Web Site (MySource)