Multiple Scriptsfeed Scripts Arbitrary File Upload Vulnerability

Bugtraq ID:	32293
Class:	Input Validation Error
CVE:	CVE-2008-6943 CVE-2008-6944 CVE-2008-6942
Remote:	Yes
Local:	No
Published:	Nov 14 2008 12:00AM
Updated:	Jul 06 2016 02:18PM
Credit:	ZoRLu
Vulnerable:	Scriptsfeed Recipes Listing Portal 0 Scriptsfeed Realtor Classifieds System 0 Scriptsfeed Auto Classifieds Software 0
Not Vulnerable:

Multiple Scriptsfeed Scripts Arbitrary File Upload Vulnerability

Multiple Scriptsfeed scripts are prone to a vulnerability that lets remote attackers upload and execute arbitrary script code on an affected computer within the context of the webserver process. This issue occurs because the applications fail to validate user-supplied input.

The following Scriptsfeed products are vulnerable:

Realtor Classifieds System
Auto Classifieds Software
Recipes Listing Portal

Multiple Scriptsfeed Scripts Arbitrary File Upload Vulnerability

Attackers may exploit this issue via a browser.

Multiple Scriptsfeed Scripts Arbitrary File Upload Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Scriptsfeed Scripts Arbitrary File Upload Vulnerability

References:

• Auto Classifieds Software Homepage (Scriptsfeed)
  
• Realtor Classifieds System Homepage (Scriptsfeed)
  
• Recipes Listing Portal Homepage (Scriptsfeed)