OSVDB ID: 23482 Title: ShoutLIVE savesettings.php Multiple Field Arbitrary PHP Code Execution |
Info |
|
|
Dates |
||||
|
|
Description |
ShoutLIVE contains a flaw that may allow a malicious user to execute arbitrary code on the server. The issue is triggered because the application does not verify all input supplied to the 'settings.php' script. It is possible that the flaw may allow an attacker to inject PHP code in these fields which is then executed on the server, resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unknown OSVDB: Web Related |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
evuln.com - eVuln