MySource Classic PHP Code Injection Vulnerability

Bugtraq ID:	19868
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 06 2006 12:00AM
Updated:	Sep 07 2006 07:23PM
Credit:	The vendor disclosed this issue.
Vulnerable:	MySource MySource 2.14.6
Not Vulnerable:	MySource MySource 2.14.8

MySource Classic PHP Code Injection Vulnerability

MySource Classic is prone to a vulnerability that may allow remote attackers to inject arbitrary PHP code into scripts.

A successful attack may result in unauthorized access in the context of the server.

MySource Classic 2.14.6 is reported vulnerable; other versions may be affected as well.

MySource Classic PHP Code Injection Vulnerability

Attackers can exploit this issue via a web client.

MySource Classic PHP Code Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

MySource Classic PHP Code Injection Vulnerability

References:

• Changes from 2.14.6 to 2.14.8 (MySource)
  
• MySource Classic Web Site (MySource)