ID de Prueba:	1.3.6.1.4.1.25623.1.0.80071
Categoría:	Web application abuses
Título:	MiniBB PathToFiles Parameter Remote File Include Vulnerability
Resumen:	The remote web server is running MiniBB, an open source forum software; which is affected by a remote file include issue.
Descripción:	Summary: The remote web server is running MiniBB, an open source forum software which is affected by a remote file include issue. Vulnerability Insight: The version of MiniBB installed on the remote host fails to sanitize input to the 'pathToFiles' parameter before using it in the 'bb_func_txt.php' script. Vulnerability Impact: Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker can exploit this issue to view arbitrary files and execute arbitrarycode, possibly taken from third-party hosts, on the remote host. Solution: Update to version 2.0.2a or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5673 BugTraq ID: 20757 http://www.securityfocus.com/bid/20757 https://www.exploit-db.com/exploits/2655 http://www.osvdb.org/29971 http://secunia.com/advisories/22596 http://www.vupen.com/english/advisories/2006/4222 XForce ISS Database: minibb-bbfunctxt-file-include(29831) https://exchange.xforce.ibmcloud.com/vulnerabilities/29831
Copyright	Copyright (C) 2008 Justin Seitz

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.