vendor:
Ultimate PHP Board
by:
SecurityFocus
7.5
CVSS
HIGH
Remote Code Execution
94
CWE
Product Name: Ultimate PHP Board
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
Insufficient Sanitization of User-Supplied Input in Ultimate PHP Board
A vulnerability has been reported in Ultimate PHP Board. The problem is said to occur due to insufficient sanitization of user-supplied input before including log data into a PHP file. As a result, it may be possible for a remote attacker to execute arbitrary PHP commands within the context of the web server. The execution of these commands would only occur when an administrator chooses to view the log of forum activity via the 'admin_iplog.php' script. An example of the exploit is given as: $ telnet www.target.org 80 Connected to www.target.org at 80 GET /board/index.php HTTP/1.0 User-Agent: <? phpinfo(); ?>
Mitigation:
Input validation should be used to ensure that user-supplied input is properly sanitized before being included in a PHP file.
