|
Family: CGI abuses --> Category: attack
vBulletin Forumdisplay.PHP Remote Command Execution Vulnerability Vulnerability Scan
Vulnerability Scan Summary Checks for vBulletin Forumdisplay.PHP Remote Command Execution Vulnerability
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a PHP script that allows execution of
arbitrary PHP code.
Description :
The remote version of vBulletin is vulnerable to a remote command
execution flaw through the script 'forumdisplay.php'. A malicious
user could exploit this flaw to execute arbitrary commands on the
remote host with the rights of the web server.
http://archives.neohapsis.com/archives/bugtraq/2005-02/0155.html
Solution:
Upgrade to vBulletin 3.0.4 or later.
Threat Level:
Medium / CVSS Base Score : 6
(AV:R/AC:H/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|