|
|
Info |
Last Modified |
| 4 months ago |
|
|
|
|
Description |
ACal contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to a user with administrative rights on the application being able to edit the source code of the 'header.php' and 'footer.php' files. This may allow an attacker to add arbitrary PHP code to either file which will be executed when the page is visited/loaded normally.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
OSVDB:
Web Related
|
|
Technical |
An attacker must supply valid administrator authentication credentials in order to exploit this vulnerability.
|
|
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
|
|
Products |
|
ACal
 |
2.2.5 |
|
|
|
|
Credit |
- Aliaksandr Hartsuyeu - alex
 evuln.com - eVuln
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
