Web application abuses : phpLiteAdmin PHP Code Injection Vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.106117

Category: Web application abuses

Title: phpLiteAdmin PHP Code Injection Vulnerability

Summary: phpLiteAdmin is prone to a PHP code injection vulnerability.

Description: Summary:
phpLiteAdmin is prone to a PHP code injection vulnerability.

Vulnerability Insight:
An authenticated attacker can create a sqlite Database with a php
extension and insert PHP Code as text fields. When done the attacker can execute it simply by access the
database file with the Webbrowser.

Vulnerability Impact:
An attacker may execute arbitrary PHP code.

Affected Software/OS:
Version <= 1.9.3

Solution:
Update to 1.9.4 or newer.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:S/C:C/I:P/A:N

Copyright Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.106117
Category:	Web application abuses
Title:	phpLiteAdmin PHP Code Injection Vulnerability
Summary:	phpLiteAdmin is prone to a PHP code injection vulnerability.
Description:	Summary: phpLiteAdmin is prone to a PHP code injection vulnerability. Vulnerability Insight: An authenticated attacker can create a sqlite Database with a php extension and insert PHP Code as text fields. When done the attacker can execute it simply by access the database file with the Webbrowser. Vulnerability Impact: An attacker may execute arbitrary PHP code. Affected Software/OS: Version <= 1.9.3 Solution: Update to 1.9.4 or newer. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:P/A:N
Copyright	Copyright (C) 2016 Greenbone AG