Jieqi CMS 'mirrorfile.php' Remote PHP Code Injection Vulnerability
BID:34983
Info
Jieqi CMS 'mirrorfile.php' Remote PHP Code Injection Vulnerability
| Bugtraq ID: | 34983 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 14 2009 12:00AM |
| Updated: | May 15 2009 08:26PM |
| Credit: | Securitylab.ir |
| Vulnerable: |
Jieqi Jieqi 1.5 |
| Not Vulnerable: | |
Discussion
Jieqi CMS 'mirrorfile.php' Remote PHP Code Injection Vulnerability
Jieqi CMS is prone to a vulnerability that can be leveraged to execute arbitrary PHP code.
Successful attacks can compromise the affected application and possibly the computer.
This issue affects Jieqi CMS 1.5 and prior versions.
Jieqi CMS is prone to a vulnerability that can be leveraged to execute arbitrary PHP code.
Successful attacks can compromise the affected application and possibly the computer.
This issue affects Jieqi CMS 1.5 and prior versions.
Exploit / POC
Jieqi CMS 'mirrorfile.php' Remote PHP Code Injection Vulnerability
Attackers can exploit the issue via a browser.
The following example exploit is available:
Attackers can exploit the issue via a browser.
The following example exploit is available:
Solution / Fix
Jieqi CMS 'mirrorfile.php' Remote PHP Code Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Jieqi CMS 'mirrorfile.php' Remote PHP Code Injection Vulnerability
References:
References:
- Vendor Homepage (Jieqi)