Test Kennung:	1.3.6.1.4.1.25623.1.0.805116
Kategorie:	Web application abuses
Titel:	Binary Moon TimThumb < 2.8.14 Remote Code Execution Vulnerability
Zusammenfassung:	This host is installed with Binary Moon; TimThumb and is prone to remote code execution vulnerability.
Beschreibung:	Summary: This host is installed with Binary Moon TimThumb and is prone to remote code execution vulnerability. Vulnerability Insight: Flaw is in the timthumb.php script related to the WebShot feature that is triggered as input passed via the 'src' parameter is not properly sanitized. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary commands. Affected Software/OS: Binary Moon TimThumb version 2.8.13, prior versions may also be affected. Solution: Upgrade to version 2.8.14 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4663 http://www.exploit-db.com/exploits/33851 http://seclists.org/fulldisclosure/2014/Jun/117 http://seclists.org/fulldisclosure/2014/Jul/4 http://packetstormsecurity.com/files/127192/TimThumb-2.8.13-Remote-Code-Execution.html http://seclists.org/oss-sec/2014/q2/689 http://secunia.com/advisories/59558
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.