ID de Prueba:	1.3.6.1.4.1.25623.1.0.56750
Categoría:	CGI abuses
Título:	CuteNews Remote File Disclosure Vulnerability
Resumen:	NOSUMMARY
Descripción:	Description: The remote version of CuteNews, according to its version number, is vulnerable to arbitrary file disclosure via the Function.PHP script as a result of improperly sanitizing user supplied input. This may allow an attacker to view arbitrary files or execute arbitrary code on the system. Versions up to and including 1.4.1 are known to be vulnerable. Solution : Upgrade to a later version. Risk factor : Medium CVSS Score: 5.0
Referencia Cruzada:	BugTraq ID: 17152 Common Vulnerability Exposure (CVE) ID: CVE-2006-1340 http://www.securityfocus.com/bid/17152 Bugtraq: 20060322 cutenews 1.4.1 Arbitrary File Access (Google Search) http://www.securityfocus.com/archive/1/428434/100/0/threaded http://hamid.ir/security/cutenews.txt http://secunia.com/advisories/19289 Common Vulnerability Exposure (CVE) ID: CVE-2006-1339 XForce ISS Database: cutenews-incfunction-directory-traversal(25324) https://exchange.xforce.ibmcloud.com/vulnerabilities/25324
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.