Summary
The remote host is running Fusion SBX, a guest book written in PHP.
A vulnerability in the remote version of this software allows remote attackers to modify the product's settings without knowing the administrator password, in addition by injecting arbitrary PHP code to one of the board's settings a remote attacker is able to cause the program to execute arbitrary code.
Solution
None at this time
Severity
Classification
-
CVE CVE-2005-1596 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- AWStats Totals 'sort' Parameter Remote Command Execution Vulnerabilities
- AlienVault OSSIM Multiple Remote Code Execution Vulnerabilities
- AdPeeps 'index.php' Multiple Vulnerabilities.
- Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object Remote Code Execution
- Awstats Configuration File Remote Arbitrary Command Execution Vulnerability