|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> CGI abuses >> RCBlog post Parameter Directory Traversal Vulnerability Vulnerability Assessment Details
|
RCBlog post Parameter Directory Traversal Vulnerability |
||
Checks for directory transversal in RCBlog index.php script Detailed Explanation for this Vulnerability Assessment Summary : The remote web server contains a PHP script that is prone to directory traversal attacks. Description : The remote host is running RCBlog, a blog written in PHP. The remote version of this software fails to sanitize user-supplied input to the 'post' parameter of the 'index.php' script. A possible hacker can use this to access arbitrary files on the remote host provided PHP's 'magic_quotes' setting is disabled or, regardless of that setting, files with a '.txt' extension such as those used by the application to store administrative credentials. See also : http://www.securityfocus.com/archive/1/422499 Solution : Remove the application as its author no longer supports it. Network Security Threat Level: Low / CVSS Base Score : 2.3 (AV:R/AC:L/Au:NR/C:P/I:N/A:N/B:N) Networks Security ID: 16342 Vulnerability Assessment Copyright: Copyright (C) 2006 Josh Zlatin-Amishav |
||
Cables, Connectors |
Vintage Apple Newton MessagePad 2000 With Original Box and Some Accessories
$199.99
Vintage Apple M2980 AppleDesign Keyboard - Tested and working - Good condition
$19.75
Vintage Apple Lisa Brochure, very nice condition
$50.00
Vintage A3S2 Apple III Computer With 12 Volt Motherboard 820-0043-00
$450.00
Rare Vintage Miniscribe Apple Macintosh SE / 20 8425SA Head Motor & Guide
$24.99
Vintage Apple Macintosh Performa 550
$360.00
Vintage Apple Computer Monitor
$45.90
Vintage Apple Macintosh System 7.5 Pinback / Button / Macaron
$32.71
Apple Macintosh Performa 466 Vintage Computer | SKU 146754
$149.95
Apple Macintosh PowerBook 180 Vintage Laptop | Retro Computer
$149.95
|
||
No Discussions have been posted on this vulnerability. |