Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> CGI abuses >> PHP Live! Remote Configuration File Include


Vulnerability Assessment Details

PHP Live! Remote Configuration File Include

Vulnerability Assessment Summary
Checks for a flaw in PHP Live! < 2.8.2

Detailed Explanation for this Vulnerability Assessment

The remote host is running PHP Live! a live support system for web sites.

The remote version of this software contains an unspecifiedflaw which
may permit a possible hacker to include a configuration file hosted on a third
party server.

A possible hacker may exploit this flaw to execute arbitrary PHP code on the remote
host.

See also : http://archives.neohapsis.com/archives/apps/freshmeat/2004-11/0022.html
Solution : Upgrade to PHP Live! 2.8.2
Network Security Threat Level: High

Networks Security ID: 11863

Vulnerability Assessment Copyright: This script is Copyright (C) 2004 Tenable Network Security

Cables, Connectors

Lot of 2 Samsung 128GB SSD SATA3 3Gps hard drive
$59.0
Lot of 2 Samsung 128GB SSD SATA3 3Gps hard drive pictureQuad Core i7 Apple MacBook Pro 15" Inch Intel Laptop 16GB RAM 2TB Hard Drive
$799.0
Quad Core i7 Apple MacBook Pro 15Crucial SSD 525GB MX300 SATA3 2.5” 7mm CT525MX300SSD1 Laptop Solid State Drive
$135.0
Crucial SSD 525GB MX300 SATA3 2.5” 7mm CT525MX300SSD1 Laptop Solid State Drive pictureSATA 2nd HDD SSD Hard Drive Caddy for 12.7mm Universal CD / DVD-ROM Optical BayM
$0.99
SATA 2nd HDD SSD Hard Drive Caddy for 12.7mm Universal CD / DVD-ROM Optical BayM picture


Discussions

No Discussions have been posted on this vulnerability.