RiSearch 0.99 /RiSearch Pro 3.2.6 show.pl Arbitrary File Access

ID EDB-ID:24327
Type exploitdb
Reporter Phil Robinson
Modified 2004-07-27T00:00:00


RiSearch 0.99 /RiSearch Pro 3.2.6 show.pl Arbitrary File Access. CVE-2004-2061. Remote exploit for cgi platform

                                            source: http://www.securityfocus.com/bid/10812/info
RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters.
A remote attacker may exploit this condition in order to launch attacks against local and public services in the context of the site that is hosting the vulnerable script.