Invision Board Ad_Member.PHP Remote File Include Vulnerability
BID:7204
Info
Invision Board Ad_Member.PHP Remote File Include Vulnerability
| Bugtraq ID: | 7204 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 09 2003 12:00AM |
| Updated: | Mar 09 2003 12:00AM |
| Credit: | This issue was announced by the vendor. |
| Vulnerable: |
Invision Power Services Invision Board 1.1.1 |
| Not Vulnerable: | |
Discussion
Invision Board Ad_Member.PHP Remote File Include Vulnerability
Invision Board is prone to a remote file include vulnerability. Remote users may possibly influence the include path for files that are required by the vulnerable 'ad_member.php' script. As a result, a malicious PHP script from an external host may be included and executed.
Invision Board is prone to a remote file include vulnerability. Remote users may possibly influence the include path for files that are required by the vulnerable 'ad_member.php' script. As a result, a malicious PHP script from an external host may be included and executed.
Exploit / POC
Invision Board Ad_Member.PHP Remote File Include Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Invision Board Ad_Member.PHP Remote File Include Vulnerability
Solution:
The vendor has released a patch for this issue.
Invision Power Services Invision Board 1.1.1
Solution:
The vendor has released a patch for this issue.
Invision Power Services Invision Board 1.1.1
-
Invision Power Services patch_01_111.zip
Invision Board ad_member.php patch.
http://forums.invisionpower.com/index.php?s=f0107570fbbd444b17ce6553cc 1dc4a3&act=Attach&type=post&id=417579
References
Invision Board Ad_Member.PHP Remote File Include Vulnerability
References:
References:
- [IMPORTANT] v1.1.1 Security Update (Invision Power Services)
- Invision Board Homepage (Invision Power Services)