OSVDB ID: 22345 Title: ACal edit.php Template Modification Arbitrary PHP Code Execution |
Info |
|
|
Dates |
||||
|
|
Description |
ACal contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to a user with administrative rights on the application being able to edit the source code of the 'header.php' and 'footer.php' files. This may allow an attacker to add arbitrary PHP code to either file which will be executed when the page is visited/loaded normally. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Available OSVDB: Web Related |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
evuln.com - eVuln