|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
ZanfiCmsLite contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the index.php script not properly sanitizing input to the "inc" variable. An attacker may use this to include an arbitrary file from a remote server which will be processed and any commands executed.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
OSVDB:
Web Related
|
|
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
|
|
Products |
|
ZanfiCmsLite
 |
1.1 |
|
|
|
|
|
|
|
Credit |
- Lin Xiaofeng - cracklove
 gmail.com -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
