CGI abuses : Ultimate PHP Board admin

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.11671

Categoría: CGI abuses

Título: Ultimate PHP Board admin_ip.php code injection

Resumen: NOSUMMARY

Descripción: Description:

The remote host is running Ultimate PHP Board (UPB).

There is a flaw in this version which may allow an attacker
to execute arbitrary code on this host, by sending a malformed
user-agent which contains PHP commands. Once the user-agent
has been sent, it is stored in the logs. When the administrator
of this web site will read the logs through admin_ip.php,
the code will be executed.

Solution : Upgrade to the latest version of this CGI
Risk factor : High

Referencia Cruzada: BugTraq ID: 7678

Copyright This script is Copyright (C) 2003 Renaud Deraison

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.11671
Categoría:	CGI abuses
Título:	Ultimate PHP Board admin_ip.php code injection
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is running Ultimate PHP Board (UPB). There is a flaw in this version which may allow an attacker to execute arbitrary code on this host, by sending a malformed user-agent which contains PHP commands. Once the user-agent has been sent, it is stored in the logs. When the administrator of this web site will read the logs through admin_ip.php, the code will be executed. Solution : Upgrade to the latest version of this CGI Risk factor : High
Referencia Cruzada:	BugTraq ID: 7678
Copyright	This script is Copyright (C) 2003 Renaud Deraison