SecuritySpace - CVE-2009-3660

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2009-3660

Description: PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.

Test IDs: 1.3.6.1.4.1.25623.1.0.901045

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2009-3660
BugTraq ID: 36411
http://www.securityfocus.com/bid/36411
http://www.exploit-db.com/exploits/9681

CVE ID:	CVE-2009-3660
Description:	PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.
Test IDs:	1.3.6.1.4.1.25623.1.0.901045
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3660 BugTraq ID: 36411 http://www.securityfocus.com/bid/36411 http://www.exploit-db.com/exploits/9681