ID de Prueba:	1.3.6.1.4.1.25623.1.0.800836
Categoría:	Web application abuses
Título:	DM FileManager <= 3.9.4 RFI Vulnerability - Active Check
Resumen:	DM FileManager is prone to a remote file inclusion (RFI); vulnerability.
Descripción:	Summary: DM FileManager is prone to a remote file inclusion (RFI) vulnerability. Vulnerability Insight: Error exists when input passed to the 'SECURITY_FILE' parameter in 'album.php' in 'dm-albums/template/' directory is not properly verified before being used to include files. Vulnerability Impact: Successful exploitation will let the remote attacker execute arbitrary PHP code, and can include arbitrary file from local or external resources when register_globals is enabled. Affected Software/OS: DutchMonkey, DM FileManager version 3.9.4 and prior. Solution: Apply the security patch from the references. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2399 http://www.exploit-db.com/exploits/9044 http://secunia.com/advisories/35622
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.