Test Kennung:	1.3.6.1.4.1.25623.1.0.56750
Kategorie:	CGI abuses
Titel:	CuteNews Remote File Disclosure Vulnerability
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote version of CuteNews, according to its version number, is vulnerable to arbitrary file disclosure via the Function.PHP script as a result of improperly sanitizing user supplied input. This may allow an attacker to view arbitrary files or execute arbitrary code on the system. Versions up to and including 1.4.1 are known to be vulnerable. Solution : Upgrade to a later version. Risk factor : Medium CVSS Score: 5.0
Querverweis:	BugTraq ID: 17152 Common Vulnerability Exposure (CVE) ID: CVE-2006-1340 http://www.securityfocus.com/bid/17152 Bugtraq: 20060322 cutenews 1.4.1 Arbitrary File Access (Google Search) http://www.securityfocus.com/archive/1/428434/100/0/threaded http://hamid.ir/security/cutenews.txt http://secunia.com/advisories/19289 Common Vulnerability Exposure (CVE) ID: CVE-2006-1339 XForce ISS Database: cutenews-incfunction-directory-traversal(25324) https://exchange.xforce.ibmcloud.com/vulnerabilities/25324
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.