|
CVE Reference: CVE-2004-1427
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2004-1427
|
|
Description:
PHP remote code injection vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows remote attackers to execute arbitrary PHP code by modifying the G_PATH parameter to reference a URL on a remote web server that contains the code, as demonstrated in index.php when using .. (dot dot) sequences in the lng parameter to cause main.inc to be loaded.
|
|
CVE Status:
Candidate
|
|
References:
XF
http://xforce.iss.net/xforce/xfdb/18717
SAID
Secunia Advisory: SA13700
BUGTRAQ
http://marc.theaimsgroup.com/?l=bugtraq&m=110442847614890&w=2
BID
12132
|
|
|
Return to the previous page.
|
