Test Kennung:	1.3.6.1.4.1.25623.1.0.18358
Kategorie:	Web application abuses
Titel:	Netref Cat_for_gen.PHP Remote PHP Script Injection Vulnerability
Zusammenfassung:	There is a vulnerability in the installed version of Netref that; enables a remote attacker to pass arbitrary PHP script code through the 'ad', 'ad_direct', and; 'm_for_racine' parameters of the 'cat_for_gen.php' script. This code will be executed on the remote; host under the privileges of the web server userid.
Beschreibung:	Summary: There is a vulnerability in the installed version of Netref that enables a remote attacker to pass arbitrary PHP script code through the 'ad', 'ad_direct', and 'm_for_racine' parameters of the 'cat_for_gen.php' script. This code will be executed on the remote host under the privileges of the web server userid. Solution: Upgrade to Netref 4.3 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 13275 Common Vulnerability Exposure (CVE) ID: CVE-2005-1222 Bugtraq: 20050419 Annuaire Netref v4.2 [ fwrite php ] vulnerability (Google Search) http://marc.info/?l=bugtraq&m=111403947305600&w=2 http://www.osvdb.org/15717 http://secunia.com/advisories/15040 XForce ISS Database: netref-catforgen-code-execution(20198) https://exchange.xforce.ibmcloud.com/vulnerabilities/20198
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.