Retired: MySource CMS Init_Mysource.PHP Remote File Include Vulnerability
BID:20817
Info
Retired: MySource CMS Init_Mysource.PHP Remote File Include Vulnerability
| Bugtraq ID: | 20817 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 30 2006 12:00AM |
| Updated: | Nov 02 2006 07:32PM |
| Credit: | Kacper is credited with the discovery of this vulnerability. |
| Vulnerable: |
MySource MySource CMS 2.16.2 |
| Not Vulnerable: | |
Discussion
Retired: MySource CMS Init_Mysource.PHP Remote File Include Vulnerability
MySource CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.
A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
MySource CMS 2.16.2 and prior versions are vulnerable to this issue.
This BID is being retired because the vendor clearly states how to avoid this issue when installing the application.
MySource CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.
A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
MySource CMS 2.16.2 and prior versions are vulnerable to this issue.
This BID is being retired because the vendor clearly states how to avoid this issue when installing the application.
Exploit / POC
Retired: MySource CMS Init_Mysource.PHP Remote File Include Vulnerability
An attacker may exploit this issue using a web client.
The following exploit code is available:
An attacker may exploit this issue using a web client.
The following exploit code is available:
Solution / Fix
Retired: MySource CMS Init_Mysource.PHP Remote File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
Retired: MySource CMS Init_Mysource.PHP Remote File Include Vulnerability
References:
References:
- Vendor Home Page (Simple Website Software )