Test ID:	1.3.6.1.4.1.25623.1.0.11498
Category:	CGI abuses
Title:	Alexandria-dev upload spoofing
Summary:	NOSUMMARY
Description:	Description: The remote host seems to be running Alexandria-Dev, an open-sourced project management system. The CGIs docman/new.php and patch/index.php can be used by an attacker with the proper credentials to upload a file and trick the server about its real location on the disk. Therefore, an attacker may use this flaw to read arbitrary files on the remote server. *** Nessus solely relied on the presence of this CGI to issue *** this alert, so this might be a false positive Solution : None at this time Risk factor : High
Cross-Ref:	BugTraq ID: 7223 BugTraq ID: 7224 BugTraq ID: 7225
Copyright	This script is Copyright (C) 2003 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.