Active PHP Bookmarks Multiple Remote File-Include Vulnerabilities

vendor:

Active PHP Bookmarks

by:

SecurityFocus

N/A

CVSS

N/A

Multiple Remote File-Include Vulnerabilities

CWE

Product Name: Active PHP Bookmarks

Affected Version From: 1.1.02

Affected Version To: 1.1.02

Patch Exists: NO

Related CWE: None

CPE: None

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2006

Active PHP Bookmarks Multiple Remote File-Include Vulnerabilities

Active PHP Bookmarks application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Mitigation:

Input validation should be used to ensure that user-supplied data is properly sanitized.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/21263/info

Active PHP Bookmarks application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Version 1.1.02 is vulnerable to this issue; other versions may also be affected.

This BID is being retired because further analysis reveals that the application is not vulnerable.

http://www.example.com/[Script_Path]/apb_common.php?APB_SETTINGS['apb_path']=Shell.txt?
http://www.example.com/[Script_Path]/apb.php?APB_SETTINGS['apb_path']=Shell.txt?