testMaker Remote Unspecified PHP Script Code Execution Vulnerability

Bugtraq ID:	29978
Class:	Unknown
CVE:	CVE-2008-5173
Remote:	Yes
Local:	No
Published:	Jun 26 2008 12:00AM
Updated:	May 07 2015 05:27PM
Credit:	Disclosed by the vendor.
Vulnerable:	testMaker testMaker 3.0p15
Not Vulnerable:	testMaker testMaker 3.0p16

testMaker Remote Unspecified PHP Script Code Execution Vulnerability

testMaker is prone to an unspecified vulnerability that may allow a remote attacker to run arbitrary PHP script code in the context of the hosting webserver process.

Few technical details are currently available. We will update this BID as soon as more information emerges.

Versions up to testMaker3.0p16 are vulnerable.

testMaker Remote Unspecified PHP Script Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

testMaker Remote Unspecified PHP Script Code Execution Vulnerability

Solution:
The vendor has released a fix. Please see the references for more information.

testMaker Remote Unspecified PHP Script Code Execution Vulnerability

References:

• testMaker Project Page (testMaker)
  
• testMaker Release Notes (testMaker)