ID de Prueba:	1.3.6.1.4.1.25623.1.0.103120
Categoría:	Web application abuses
Título:	Douran Portal <= 3.9.7.8 Arbitrary File Download Vulnerability
Resumen:	Douran Portal is prone to a vulnerability that lets attackers; download arbitrary files. This issue occurs because the application fails to sufficiently; sanitize user-supplied input.
Descripción:	Summary: Douran Portal is prone to a vulnerability that lets attackers download arbitrary files. This issue occurs because the application fails to sufficiently sanitize user-supplied input. Vulnerability Impact: Exploiting this issue will allow an attacker to view arbitrary files within the context of the application. Information harvested may aid in launching further attacks. Affected Software/OS: Douran Portal version 3.9.7.8 and prior. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1569 BugTraq ID: 46927 http://www.securityfocus.com/bid/46927 Bugtraq: 20110320 Douran Portal File Download/Source Code Disclosure Vulnerability (Google Search) http://www.securityfocus.com/archive/1/517085/100/0/threaded http://www.exploit-db.com/exploits/17011 http://soroush.secproject.com/blog/2011/01/unrestricted_file_download_v1_0/ http://osvdb.org/71250 http://secunia.com/advisories/43792 http://securityreason.com/securityalert/8180 XForce ISS Database: douranportal-download-file-download(66177) https://exchange.xforce.ibmcloud.com/vulnerabilities/66177
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.