Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-6793
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-6793

Description:
The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/46380

SAID
  Secunia Advisory: SA32553

OSVDB
  49574

MISC
  http://www.ikkisoft.com/stuff/LC-2008-07.txt

MILW0RM
  http://www.milw0rm.com/exploits/7001

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/498081/100/0/threaded

BID
  32128


Return to the previous page.