Web application abuses : Chora RCE Vulnerability

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.12281

Categoría: Web application abuses

Título: Chora RCE Vulnerability

Resumen: The remote server is running at least one instance of Chora version; 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run; arbitrary code with the permissions of the web user.

Descripción: Summary:
The remote server is running at least one instance of Chora version
1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run
arbitrary code with the permissions of the web user.

Solution:
Upgrade to Chora version 1.2.2 or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Copyright Copyright (C) 2004 George A. Theall

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.12281
Categoría:	Web application abuses
Título:	Chora RCE Vulnerability
Resumen:	The remote server is running at least one instance of Chora version; 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run; arbitrary code with the permissions of the web user.
Descripción:	Summary: The remote server is running at least one instance of Chora version 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run arbitrary code with the permissions of the web user. Solution: Upgrade to Chora version 1.2.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2004 George A. Theall