URLshrink Free Unspecified Vulnerability - Advisories

URLshrink Free Unspecified Vulnerability

Secunia Advisory:	SA24731
Release Date:	2007-04-12

Critical:	Highly critical
Impact:	Unknown System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	URLshrink Free 1.x

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: A vulnerability has been reported in URLshrink Free, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an unspecified error. This can be exploited via unknown vectors to "tamper with your site". The vulnerability is reported in versions prior to 1.3.2. NOTE: the vulnerability may be related to a PHP script insertion vulnerability reported by Dj7xpl. Solution: Update to version 1.3.2. Provided and/or discovered by: Reported by the vendor. Original Advisory: http://developers.jccorp.net/modules/...hp?forum=8&post_id=77#forumpost77 http://milw0rm.com/exploits/3611



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1 Related Secunia Security Advisories

1. URLshrink Free "formurl" File Inclusion Vulnerability

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	OpenOffice "rtl_allocateMe mory()" Truncation Vulnerability

2.	JustSystems Ichitaro Products Unspecified Code Execution Vulnerability

3.	Honeyd "test.sh" Insecure Temporary Files

4.	Red Hat Directory Server Multiple Vulnerabilities

5.	HP-UX update for Apache

6.	Tiger "genmsgidx" Insecure Temporary Files

7.	Red Hat update for tomcat

8.	Ampache "gather-message s.sh" Insecure Temporary Files

9.	Red Hat update for adminutil

10.	Red Hat Directory Server Denial of Service Vulnerabilities