ID de Prueba:	1.3.6.1.4.1.25623.1.0.805116
Categoría:	Web application abuses
Título:	Binary Moon TimThumb < 2.8.14 RCE Vulnerability - Active Check
Resumen:	Binary Moon TimThumb is prone to a remote code execution (RCE); vulnerability.
Descripción:	Summary: Binary Moon TimThumb is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: Flaw is in the timthumb.php script related to the WebShot feature that is triggered as input passed via the 'src' parameter is not properly sanitized. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary commands. Affected Software/OS: Binary Moon TimThumb version 2.8.13. Prior versions may also be affected. Solution: Update to version 2.8.14 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-4663 http://www.exploit-db.com/exploits/33851 http://seclists.org/fulldisclosure/2014/Jun/117 http://seclists.org/fulldisclosure/2014/Jul/4 http://packetstormsecurity.com/files/127192/TimThumb-2.8.13-Remote-Code-Execution.html http://seclists.org/oss-sec/2014/q2/689 http://secunia.com/advisories/59558
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.