|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses >> MiniBB PathToFiles Parameter Remote File Include Vulnerability Vulnerability Assessment Details
|
MiniBB PathToFiles Parameter Remote File Include Vulnerability |
||
Tries to read a local file with MiniBB Detailed Explanation for this Vulnerability Assessment Summary : The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running MiniBB, an open source forum software. The version of MiniBB installed on the remote host fails to sanitize input to the 'pathToFiles' parameter before using it in the 'bb_func_txt.php' script. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker can exploit this issue to view arbitrary files and execute arbitrary code, possibly taken from third-party hosts, on the remote host. See also : http://www.milw0rm.com/exploits/2655 Solution : Update to version 2.0.2a or later. Network Security Threat Level: Medium / CVSS Base Score : 5.6 (AV:R/AC:H/Au:NR/C:P/I:P/A:P/B:N) Networks Security ID: 20757 Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Justin Seitz |
||
Cables, Connectors |
ASUS H110M-A/M.2 Intel H110 HDMI SATA 6Gb/s USB 3.0 Micro ATX Motherboard DDR4
$37.49
ASUS H110I-PLUS LGA1151 Desktop Motherboard Intel H110 Mini-ITX W/IO
$42.95
Asus Prime H310M-A R2.0 Intel LGA 1151 DDR4 Desktop Motherboard
$54.99
ASRock B550M Pro SE AM4 DDR4 SATA 6Gb/s 1 PCIe 4.0 x16 Micro ATX Motherboard
$84.99
ASUS Prime X570-Pro AMD AM4 DDR4 ATX Motherboard
$74.99
MSI PRO B650-P WiFi AMD AM5 DDR5 WiFi 6E ProSeries Motherboard
$95.95
Asus H81M-C Intel LGA1150 DDR3 Desktop Motherboard MicroATX Socket H3
$23.99
ASUS PRIME B360M-C LGA1151 DDR4 mATX Motherboard w/Intel i3-8100 CPU & IO Shield
$57.00
ASUS B85M-E Motherboard Intel B85 (4th Gen) LGA1150 DDR3 microATX
$39.99
GIGABYTE B760M AORUS Elite AX LGA 1700 M-ATX DDR5 M.2 Wi-Fi Motherboard
$105.95
|
||
No Discussions have been posted on this vulnerability. |