CrawlTrack Unspecified PHP Code Execution Vulnerability

Bugtraq ID:	45640
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 03 2011 12:00AM
Updated:	Jan 03 2011 12:00AM
Credit:	The vendor credits an anonymous person
Vulnerable:	CrawlTrack CrawlTrack 3.2.6
Not Vulnerable:	CrawlTrack CrawlTrack 3.2.7

CrawlTrack Unspecified PHP Code Execution Vulnerability

CrawlTrack is prone to an unspecified PHP code-execution vulnerability.

An attacker can exploit this issue to inject and execute arbitrary malicious PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system. Other attacks are possible, however, this requires 'stats' to be public.

CrawlTrack versions prior to 3.2.7 are vulnerable.

CrawlTrack Unspecified PHP Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

CrawlTrack Unspecified PHP Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

CrawlTrack Unspecified PHP Code Execution Vulnerability

References:

• CrawlTrack Homepage (CrawlTrack)
  
• CrawlTrack Release Note (CrawlTrack)
  
• CrawlTrack Security Update (CrawlTrack)