|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
N.T. contains a flaw that may allow a malicious user to run arbitrary code. The issue is triggered due to ticker.db.php not properly sanitizing unspecified or unknown values. Arbitrary PHP code may be injected, which will be executed when the file is included. It is possible that the flaw may allow the execution of arbitrary commands resulting in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Rumored / Private
OSVDB:
Web Related
|
|
Technical |
An attacker must supply valid administrator authentication credentials in order to exploit this vulnerability. Additionally, this vulnerability is only present when the magic_quotes_gpc PHP option is 'off'.
|
|
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
|
|
Products |
|
N.T.
 |
1.1.0 |
|
|
|
|
Credit |
- Aliaksandr Hartsuyeu - alex
 evuln.com - eVuln
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
