ID de Prueba:	1.3.6.1.4.1.25623.1.0.56982
Categoría:	CGI abuses
Título:	Nucleus CMS GLOBALS[DIR_LIBS] Remote File Include
Resumen:	NOSUMMARY
Descripción:	Description: The remote version of Nucleus CMS, according to its version number, is vulnerable to an arbitrary file include vulnerability in 'pluginadmin.php' via the GLOBALS[DIR_LIBS] parameter. Attackers can use this to execute arbitrary code or to view any file on the remote system. Versions prior to 3.23 are known to be vulnerable. Solution : Upgrade to 3.23 or later. Risk factor : High CVSS Score: 5.1
Referencia Cruzada:	BugTraq ID: 18097 Common Vulnerability Exposure (CVE) ID: CVE-2006-2583 http://www.securityfocus.com/bid/18097 Bugtraq: 20060523 Nucleus CMS <= 3.22 arbitrary remote inclusion (Google Search) http://www.securityfocus.com/archive/1/434837/100/0/threaded http://retrogod.altervista.org/nucleus_322_incl_xpl.html http://www.osvdb.org/25749 http://securitytracker.com/id?1016146 http://secunia.com/advisories/20219 http://securityreason.com/securityalert/951 http://www.vupen.com/english/advisories/2006/1936 XForce ISS Database: nucleus-dirlibs-file-include(26606) https://exchange.xforce.ibmcloud.com/vulnerabilities/26606
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.