OSVDB ID: 81605

Title: Fabran CMS index.php p Parameter SQL Injection

Info

Disclosure

Apr 27, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Fabran CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the index.php script not properly sanitizing user input supplied to the 'p' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Unknown
Disclosure: Uncoordinated Disclosure
OSVDB: Web Related, Concern

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

Fabran.com Produzioni Multimediali

MyCMSite

Unspecified

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/81605