Summary
The remote web server has a PHP application that is affected by multiple flaws.
Description:
The remote host is running SPIP, an open-source CMS written in PHP.
The remote version of this software is prone to SQL injection and cross site scripting attacks. An attacker could send specially crafted URL to modify SQL requests, for example, to obtain the admin password hash, or execute malicious script code on the remote system.
Solution
Upgrade to SPIP version 1.8.2-g or later.
References
Severity
Classification
-
CVE CVE-2006-0517, CVE-2006-0518, CVE-2006-0519 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- AjaxPortal 'di.php' File Inclusion Vulnerability
- ALCASAR Remote Code Execution Vulnerability
- Apache Struts2 Redirection and Security Bypass Vulnerabilities
- AlstraSoft AskMe Pro 'forum_answer.php' and 'profile.php' Multiple SQL Injection Vulnerabilities
- AWCM CMS Multiple Remote File Include Vulnerabilities