Test ID:	1.3.6.1.4.1.25623.1.0.55622
Category:	CGI abuses
Title:	CoolForum avatar.php Arbitrary File Disclosure
Summary:	NOSUMMARY
Description:	Description: A vulnerable version of CoolForum is installed which allows attackers to retrieve the contents of arbitrary files on the system as a result of insufficient sanitization of the 'img' parameter. Attackers may use this to disclose any file accessible by the web server. Solution: Upgrade to a later version of the software. Risk factor : Medium CVSS Score: 5.0
Cross-Ref:	BugTraq ID: 5973 Common Vulnerability Exposure (CVE) ID: CVE-2002-1515 http://www.securityfocus.com/bid/5973 Bugtraq: 20021012 CoolForum v 0.5 beta shows content of PHP files (Google Search) http://online.securityfocus.com/archive/1/295358 http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0001.html http://www.iss.net/security_center/static/10237.php
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.