|
|
|
Technorati |
the "AD_BODY_TEMP" variable. This may allow an attacker to register.php not properly sanitizing user input supplied to include a Free File Hosting contains a flaw by execute arbitrary commands. The issue is due to vulnerable script. a remote attacker to the remote host that may allow a file from that contains arbitrary commands which will be executed |
|
Attack Type |
Solution © Copyright 2008 Open Source Vulnerability Database (OSVDB), All Rights Reserved.
Search OSVDB Integrity
22594 : Input Manipulation
30145 : Free File Hosting register.php AD_BODY_TEMP Variable Remote File Inclusion
Account : Web Related of : Loss
|
|
Blogs |
"on". This has not been the This vulnerability is only present when to default setting for PHP installs since version 4.2.0 (22-Apr-2002). the register_globals PHP option is set |
|
Products |
30145: Free File Hosting register.php AD_BODY_TEMP Variable Remote File Inclusion |
|
30144 |
| |
Privacy Statement
 |
Info |
|
|
|
|
Printer |
- Join the Effort
 http://www.golrleaf.com/30145
|
|
| |
| |
