Libstats template_csv.php rInfo[content] Variable Remote File Inclusion

2007-05-18T14:18:46
ID OSVDB:36233
Type osvdb
Reporter OSVDB
Modified 2007-05-18T14:18:46

Description

Technical Description

This vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).

Manual Testing Notes

http://[target]/path/template_csv.php?rInfo[content]=[[Sh3LL Script]]

References:

Secunia Advisory ID:25342 Other Advisory URL: http://milw0rm.com/exploits/3948 ISS X-Force ID: 34369 FrSIRT Advisory: ADV-2007-1880 CVE-2007-2779 Bugtraq ID: 24047