Test ID:	1.3.6.1.4.1.25623.1.0.15829
Category:	CGI abuses
Title:	KorWeblog Remote Directory Listing Vulnerability
Summary:	NOSUMMARY
Description:	Description: The remote host is using KorWeblog, a web based log application written in PHP. A vulnerability exists in the remote version of this product which may allow a remote attacker to disclose directory listings. Information disclosures could help the attacker in further attacks. Solution : Upgrade to KorWeblog 1.6.2 Risk factor : Medium
Cross-Ref:	BugTraq ID: 11744 Common Vulnerability Exposure (CVE) ID: CVE-2004-1543 http://www.securityfocus.com/bid/11744 Bugtraq: 20041124 STG Security Advisory: [SSA-20041122-10] KorWeblog directory traversal vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110132543805873&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029342.html http://secunia.com/advisories/13286 XForce ISS Database: korweblog-viewimg-directory-traversal(18234) https://exchange.xforce.ibmcloud.com/vulnerabilities/18234
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.