vBSEO 'proc_deutf()' Remote Code Execution Vulnerability
BID:51647
Info
vBSEO 'proc_deutf()' Remote Code Execution Vulnerability
| Bugtraq ID: | 51647 |
| Class: | Design Error |
| CVE: |
CVE-2012-5223 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 24 2012 12:00AM |
| Updated: | Oct 03 2012 03:40PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Crawlability vBSEO 3.5.2 Crawlability vBSEO 3.6.0 Crawlability vBSEO 3.5.1 Crawlability vBSEO 3.5.0 |
| Not Vulnerable: | |
Discussion
vBSEO 'proc_deutf()' Remote Code Execution Vulnerability
vBSEO is prone to a remote code-execution vulnerability.
Exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application.
vBSEO 3.5.0, 3.5.1, 3.5.2, and 3.6.0.are vulnerable; other versions may also be affected.
vBSEO is prone to a remote code-execution vulnerability.
Exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application.
vBSEO 3.5.0, 3.5.1, 3.5.2, and 3.6.0.are vulnerable; other versions may also be affected.
Exploit / POC
vBSEO 'proc_deutf()' Remote Code Execution Vulnerability
Attackers can use a browser to exploit this issue.
Tghe following exploit code is available
Attackers can use a browser to exploit this issue.
Tghe following exploit code is available
Solution / Fix
vBSEO 'proc_deutf()' Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more details.
Solution:
Updates are available. Please see the references for more details.