vendor:
PHPix
by:
SecurityFocus
7.5
CVSS
HIGH
Remote Command Execution
78
CWE
Product Name: PHPix
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
PHPix Remote Command Execution Vulnerability
It has been reported that PHPix is vulnerable to a remote command execution vulnerability due to poor handling of externally supplied data such as shell metacharacters. This issue may allow unauthorized access to the affected system with the privileges of the web server hosting the vulnerable program. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server.
Mitigation:
Input validation should be used to ensure that user-supplied data is properly sanitized before being used in system calls. Additionally, it is recommended that the web server be configured to run with the least privileges necessary.
