Test ID:	1.3.6.1.4.1.25623.1.0.56990
Category:	CGI abuses
Title:	Contenido Remote File Include
Summary:	NOSUMMARY
Description:	Description: The remote version of Contenido, according to its version number, is suspected of being vulnerable to a remote file include vulnerability. Specifically, the vulnerability involves the settings 'allow_url_fopen' and 'register_globals', which is a combination that leads to remote file includes when user supplied input is insufficiently sanitized. Versions prior to 4.6.4 are vulnerable. Solution : Upgrade to 4.6.4 or later. Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 15790 Common Vulnerability Exposure (CVE) ID: CVE-2005-4132 http://www.securityfocus.com/bid/15790 http://archives.neohapsis.com/archives/apps/freshmeat/2005-12/0008.html http://www.osvdb.org/21566 http://www.vupen.com/english/advisories/2005/2819
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.