PT-2001-2369 · Phormation · Phormation Php Script

Publicado 2001-10-02 · Atualizado 2008-09-10 · CVE-2001-1237

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Phormation PHP script versions 0.9.1 and earlier

Description The issue allows remote attackers to execute arbitrary code by including files from remote web sites. This is achieved by using an HTTP request that modifies the phormationdir variable.

Recommendations For Phormation PHP script versions 0.9.1 and earlier, consider restricting access to the phormationdir variable to prevent modification via HTTP requests until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-1237

Produtos afetados

Phormation Php Script

Referências · 6

• 🔥 http://securityfocus.com/bid/3393 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1237 · Nota de Segurança
• http://peaceworks.ca/phormation/phormation-0.9.2.tar.gz · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html · Nota
• http://kb.cert.org/vuls/id/847803 · Nota
• http://iss.net/security_center/static/7215.php · Nota