IndyNews manageMedia() File Deletion Vulnerability
BID:6857
Info
IndyNews manageMedia() File Deletion Vulnerability
| Bugtraq ID: | 6857 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 14 2003 12:00AM |
| Updated: | Feb 14 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to Elisa Manara <[email protected]>. |
| Vulnerable: |
IndyNews IndyNews 0 |
| Not Vulnerable: | |
Exploit / POC
IndyNews manageMedia() File Deletion Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
IndyNews manageMedia() File Deletion Vulnerability
Solution:
The vendor has released a patch which addresses this issue.
IndyNews IndyNews 0
Solution:
The vendor has released a patch which addresses this issue.
IndyNews IndyNews 0
-
IndyNews IndyNews_1.0_SecPatch.zip
http://www.bergamoblog.it/modules.php?name=Downloads&d_op=getit&lid=4
References
IndyNews manageMedia() File Deletion Vulnerability
References:
References:
- IndyNews - PhpNuke module: several problems (Elisa Manara
)