phpFreeLog log.php Local File Include Vulnerability
BID:25873
Info
phpFreeLog log.php Local File Include Vulnerability
| Bugtraq ID: | 25873 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-5258 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2007 12:00AM |
| Updated: | May 07 2015 05:35PM |
| Credit: | KUZ3Y discovered this vulnerability. |
| Vulnerable: |
phpFreeLog phpFreeLog alpha 0.2.0 |
| Not Vulnerable: | |
Discussion
phpFreeLog log.php Local File Include Vulnerability
phpFreeLog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the webserver process.
This issue affects phpFreeLog alpha 0.2.0; other versions may also be vulnerable.
phpFreeLog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.
Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the webserver process.
This issue affects phpFreeLog alpha 0.2.0; other versions may also be vulnerable.
Exploit / POC
phpFreeLog log.php Local File Include Vulnerability
Attackers can exploit this issue via a browser.
Attackers can exploit this issue via a browser.
Solution / Fix
phpFreeLog log.php Local File Include Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].