Active PHP Bookmarks Multiple File Include Vulnerabilities
BID:6545
Info
Active PHP Bookmarks Multiple File Include Vulnerabilities
| Bugtraq ID: | 6545 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 06 2003 12:00AM |
| Updated: | Jan 06 2003 12:00AM |
| Credit: | Discovery of this issue is credited to <[email protected]>. |
| Vulnerable: |
Active PHP Bookmarks Active PHP Bookmarks 1.1 .01 |
| Not Vulnerable: | |
Discussion
Active PHP Bookmarks Multiple File Include Vulnerabilities
Active PHP Bookmarks (APB) is prone to multiple issues which may allow a remote attacker to cause a malicious external file to be included and interpreted.
Attackers may influence include paths for a number of APB scripts. By specifying a path to a resource (such as a malicious PHP script) on a remote attacker-controlled server, it is possible to cause arbitrary commands to be executed with the privileges of the webserver process.
Active PHP Bookmarks (APB) is prone to multiple issues which may allow a remote attacker to cause a malicious external file to be included and interpreted.
Attackers may influence include paths for a number of APB scripts. By specifying a path to a resource (such as a malicious PHP script) on a remote attacker-controlled server, it is possible to cause arbitrary commands to be executed with the privileges of the webserver process.
Exploit / POC
Active PHP Bookmarks Multiple File Include Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Active PHP Bookmarks Multiple File Include Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Active PHP Bookmarks Multiple File Include Vulnerabilities
References:
References:
- Active PHP Bookmarks Homepage (Active PHP Bookmarks)
- Bookmar4U and Active PHP Bookmarks Vulnerabilities (