|
|
Info |
Last Modified |
| 5 months ago |
|
|
|
|
Description |
IdealBB contains a flaw that may allow a malicious user to upload arbitrary files. The issue is triggered because there are four points in the application where data submitted by the user is not sanitised correctly. It is possible that the flaw allows an attacker to upload files with a '.asa' file extenstion, which may allow execution of arbitrary code on the server, resulting in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
OSVDB:
Web Related
|
|
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
|
|
Products |
|
IdealBB
 |
1.5.4a |
|
|
|
|
|
|
Credit |
- CodeScan Labs - advisories
 codescan.com - CodeScan Labs
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
