PT-2009-1464
CVE-2008-5989
·
تاريخ النشر
2009-01-28
·
تاريخ التحديث
2017-09-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
PHPcounter versions 1.3.2 and earlier
Description
A directory traversal issue exists when the
magic quotes gpc setting is disabled, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) sequence in the l parameter.Recommendations
For PHPcounter versions 1.3.2 and earlier, consider disabling the
l parameter in the defs.php file until a patch is available. As a temporary workaround, enable the magic quotes gpc setting to prevent the exploitation of this issue.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾