|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses >> Oreon file Parameter Remote File Include Vulnerability Vulnerability Assessment Details
|
Oreon file Parameter Remote File Include Vulnerability |
||
Tries to read a local file with Oreon Detailed Explanation for this Vulnerability Assessment Summary : The remote web server contains a PHP script that is susceptible to a remote file include vulnerability. Description : The remote host is running Oreon, a web-based network supervision program based on Nagios. The installation of Oreon on the remote host fails to sanitize input to the 'file' parameter of the 'lang/index.php' script before using it to include PHP code. Regardless of PHP's 'register_globals' setting, an unauthenticated attacker may be able to exploit this issue to view arbitrary files or to execute arbitrary PHP code on the remote host, subject to the rights of the web server user id. See also : http://www.milw0rm.com/exploits/3150 Solution : Unknown at this time. Network Security Threat Level: High / CVSS Base Score : 7.0 (AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N) Networks Security ID: 22107 Vulnerability Assessment Copyright: This script is Copyright (C) 2007 Tenable Network Security |
||
Cables, Connectors |
🍎🖥️ Vintage Apple III Computer - Works Great Monitor, Hard Drive, Software 🍎
$2000.00
Vintage 1990 Apple Keyboard II M0487
$49.99
Vintage Apple Ethernet Twisted-Pair Transceiver Model M0437
$19.99
Vintage Apple Macintosh IIsi M0360 Computer For Parts or Repair w/Power Cord
$69.99
Vintage Apple Macintosh SE Case - Empty Shell - Housing retro project
$60.00
Vintage Apple Macintosh Extended Keyboard II AEK M3501 + ADB Mouse M2706 TESTED
$99.00
VINTAGE APPLE IMAC USB KEYBOARD - M2452 - 1999 - tested working
$39.99
VINTAGE APPLE 1980’s COMPUTER LAPEL PIN BADGE
$14.99
MacEffects Gray ALPS Mechanical Keyboard for Vintage Apple IIe Computers
$195.00
VINTAGE Apple Macintosh LC (FOR PARTS - DOES NOT BOOT) NO HDD #27
$49.99
|
||
No Discussions have been posted on this vulnerability. |