ID de Prueba:	1.3.6.1.4.1.25623.1.0.18358
Categoría:	Web application abuses
Título:	Netref Cat_for_gen.PHP Remote PHP Script Injection Vulnerability
Resumen:	There is a vulnerability in the installed version of Netref that; enables a remote attacker to pass arbitrary PHP script code through the 'ad', 'ad_direct', and; 'm_for_racine' parameters of the 'cat_for_gen.php' script. This code will be executed on the remote; host under the privileges of the web server userid.
Descripción:	Summary: There is a vulnerability in the installed version of Netref that enables a remote attacker to pass arbitrary PHP script code through the 'ad', 'ad_direct', and 'm_for_racine' parameters of the 'cat_for_gen.php' script. This code will be executed on the remote host under the privileges of the web server userid. Solution: Upgrade to Netref 4.3 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1222 Bugtraq: 20050419 Annuaire Netref v4.2 [ fwrite php ] vulnerability (Google Search) http://marc.info/?l=bugtraq&m=111403947305600&w=2 http://www.osvdb.org/15717 http://secunia.com/advisories/15040 XForce ISS Database: netref-catforgen-code-execution(20198) https://exchange.xforce.ibmcloud.com/vulnerabilities/20198
Copyright	Copyright (C) 2005 Josh Zlatin-Amishav

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.