Remote file inclusion

2007-07-1721:30:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.3%

JSON

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

CPENameOperatorVersion
proventia_network_ips_gx5008eq1.5
proventia_network_ips_gx5108eq1.3

CPE	Name	Operator	Version
	proventia_network_ips_gx5008	eq	1.5
	proventia_network_ips_gx5108	eq	1.3

References

osvdb.org/36474

secunia.com/advisories/25979

www.sybsecurity.com/hack-proventia-1.pdf

www.vupen.com/english/advisories/2007/2545