diff options
| author | mnag <mnag@FreeBSD.org> | 2006-05-04 04:14:47 +0800 |
|---|---|---|
| committer | mnag <mnag@FreeBSD.org> | 2006-05-04 04:14:47 +0800 |
| commit | 9393e1bf8450f0467c1bd11a141930d8e8f69184 (patch) | |
| tree | 4188cb50a57c3df5474505940a529331744c8008 /security | |
| parent | 66bb92a424abce7d50d2ec495cf13d1ed1b4d739 (diff) | |
| download | freebsd-ports-gnome-9393e1bf8450f0467c1bd11a141930d8e8f69184.tar.gz freebsd-ports-gnome-9393e1bf8450f0467c1bd11a141930d8e8f69184.tar.zst freebsd-ports-gnome-9393e1bf8450f0467c1bd11a141930d8e8f69184.zip | |
phpwebftp -- "language" Local File Inclusion
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 30fef921a60a..c6f491d87296 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,40 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="d9dc2697-dadf-11da-912f-00123ffe8333"> + <topic>phpwebftp -- "language" Local File Inclusion</topic> + <affects> + <package> + <name>phpwebftp</name> + <range><lt>3.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Secunia reports:</p> + <blockquote cite="http://secunia.com/advisories/19706/"> + <p>phpWebFTP have a vulnerability, which can be exploited by + malicious people to disclose sensitive information.</p> + <p>Input passed to to the "language" parameter in index.php isn't + properly verified, before it is used to include files. This can be + exploited to include arbitrary files from local resources.</p> + <p>Successful exploitation requires that "magic_quotes_gpc" is + disabled.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2006-1812</cvename> + <cvename>CVE-2006-1813</cvename> + <url>https://sourceforge.net/forum/forum.php?forum_id=566199</url> + <url>http://secunia.com/advisories/19706/</url> + </references> + <dates> + <discovery>2006-04-18</discovery> + <entry>2006-05-03</entry> + </dates> + </vuln> + <vuln vid="e2476979-da74-11da-a67b-0013d4a4a40e"> <topic>firefox -- denial of service vulnerability</topic> <affects> |