Test ID:	1.3.6.1.4.1.25623.1.0.11101
Category:	CGI abuses
Title:	PHPAdsNew code injection
Summary:	NOSUMMARY
Description:	Description: It is possible to make the remote host include php files hosted on a third party server using PHPAdsNew. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. Solution : Upgrade to PHPAdsNew Beta 6.1 or newer Risk factor : High
Cross-Ref:	BugTraq ID: 3392 Common Vulnerability Exposure (CVE) ID: CVE-2001-1054 http://www.securityfocus.com/bid/3392 Bugtraq: 20011002 results of semi-automatic source code audit (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html http://www.iss.net/security_center/static/7215.php
Copyright	This script is Copyright (C) 2002 Renaud Deraison

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.