Vulnerability details :
 
Kostenloses Linkmanagementscript template/index.php Multiple Parameter Remote File Inclusion 
 
     Fiche

Fiche créée le 2008-05-16 20:36:12, dernière mise à jour le 2009-04-30 03:45:31



This vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).
http://[target]/script/template/index.php?main_page_directory=[RFI] http://[target]/script/template/index.php?page_to_include=[RFI]

 
 
 
External refs :
OSVDB  45222
 
 
 
 

 

 


Free consultation (search)
 
  Fill one or some of the fields below :
   
Vendor
 
Title
 
Vulnerability ref.
 
 
   
 
   
Individual alerts
 
You determine with one profile dynamic and assisted, all your material and software equipment.
We shall inform you then automatically, as soon as a notification of security will concern one or several elements of it profile.
Every notification is definite, consists of numerous information to determine risk and to protect itself from it.
 
Login:
Pass:
 
Free online subscription
© Power4Security.com - BMS Ltd UK 2007-2008 - powered by Power4Website.com