Uiga Church Portal Multiple Vulnerabilities
BID:42011
Info
Uiga Church Portal Multiple Vulnerabilities
| Bugtraq ID: | 42011 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 04 2009 12:00AM |
| Updated: | Jul 28 2010 07:05PM |
| Credit: | Nac Mac Feegle |
| Vulnerable: |
Uiga Church Portal 0 |
| Not Vulnerable: | |
Discussion
Uiga Church Portal Multiple Vulnerabilities
Uiga Church Portal is prone to multiple vulnerabilities because it fails to sufficiently sanitize user-supplied data and restrict access to restricted files.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, gain administrative access to the affected application, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, execute arbitrary server-side script code on an affected computer in the context of the webserver process, or perform restricted actions.
Uiga Church Portal is prone to multiple vulnerabilities because it fails to sufficiently sanitize user-supplied data and restrict access to restricted files.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, gain administrative access to the affected application, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, execute arbitrary server-side script code on an affected computer in the context of the webserver process, or perform restricted actions.
Exploit / POC
Uiga Church Portal Multiple Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
Uiga Church Portal Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].