Test Kennung:	1.3.6.1.4.1.25623.1.0.800314
Kategorie:	Web application abuses
Titel:	fuzzylime cms code/track.php Local File Inclusion Vulnerability
Zusammenfassung:	The host is running fuzzylime CMS and is prone to Local File; Inclusion vulnerability.
Beschreibung:	Summary: The host is running fuzzylime CMS and is prone to Local File Inclusion vulnerability. Vulnerability Insight: The flaw is caused due improper handling of input passed to p parameter in code/track.php file when the url, title and excerpt form parameters are set to non-null values. Vulnerability Impact: Successful exploitation will cause inclusion and execution of arbitrary files from local resources via directory traversal attacks. Affected Software/OS: fuzzylime cms version 3.03 and prior. Solution: Update to fuzzylime cms version 3.03a or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 32475 Common Vulnerability Exposure (CVE) ID: CVE-2008-5291 http://www.securityfocus.com/bid/32475 https://www.exploit-db.com/exploits/7231 http://secunia.com/advisories/32865 http://securityreason.com/securityalert/4667 XForce ISS Database: fuzzylimecms-track-file-include(46841) https://exchange.xforce.ibmcloud.com/vulnerabilities/46841
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.