Info

Last Modified

2 months ago

Percent Complete

35%

Disclosure

Aug 10, 2007

Discovery

Unknown

Dates

Exploit

Aug 10, 2007

Solution

Unknown

This Entry needs help! It is only 35% Complete. Click the edit link above to add more information.

Contributing is fast and easy, and benefits the entire security community.

Keywords

No Keywords

Description

(Description Provided by CVE) : PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
OSVDB: Web Related

Technical

This vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).

Products

Unknown or Incomplete

References

CVE ID: 2007-4313 (see also: NVD)
Bugtraq ID: 25264
Secunia Advisory ID: 26414
ISS X-Force ID: 35945
FrSIRT Advisory: ADV-2007-2861
Other Advisory URL: http://milw0rm.com/exploits/4276

Manual Testing Notes

Credit

Kacper - kacper1964yahoo.pl - DEVIL TEAM

Blogs

Provided by Technorati

2007/08/14 05:17:15 | CVE-2007-4313

from: Много интерессного и полезного : Новости

PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958. en.securitylab.ru/nvd/301167.php

2007/08/14 06:04:37 | CVE-2007-4313

from: EclipseSSL : Дневник (Журнал/Блог)

Comments

Add Comment Hide Add Comment

No Comments.

DONATE NOW!

User Status

Account
- Login
- Sign-Up

Quick Searches