ID de Prueba:	1.3.6.1.4.1.25623.1.0.800314
Categoría:	Web application abuses
Título:	fuzzylime cms code/track.php Local File Inclusion Vulnerability
Resumen:	fuzzylime CMS is prone to Local File Inclusion vulnerability.
Descripción:	Summary: fuzzylime CMS is prone to Local File Inclusion vulnerability. Vulnerability Insight: The flaw is caused due improper handling of input passed to p parameter in code/track.php file when the url, title and excerpt form parameters are set to non-null values. Vulnerability Impact: Successful exploitation will cause inclusion and execution of arbitrary files from local resources via directory traversal attacks. Affected Software/OS: fuzzylime cms version 3.03 and prior. Solution: Update to fuzzylime cms version 3.03a or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5291 BugTraq ID: 32475 http://www.securityfocus.com/bid/32475 https://www.exploit-db.com/exploits/7231 http://secunia.com/advisories/32865 http://securityreason.com/securityalert/4667 XForce ISS Database: fuzzylimecms-track-file-include(46841) https://exchange.xforce.ibmcloud.com/vulnerabilities/46841
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.