漏洞信息详情
Marc Cagninacci mcLinksCounter 多个PHP远程文件包含漏洞
- CNNVD编号:CNNVD-200609-316
- 危害等级: 高危
- CVE编号:
CVE-2006-4863
- 漏洞类型:
代码注入
- 发布时间:
2006-09-19
- 威胁类型:
远程
- 更新时间:
2006-09-21
- 厂 商:
marc_cagninacci - 漏洞来源:
-
漏洞简介
Marc Cagninacci mcLinksCounter中存在多个PHP远程文件包含漏洞,远程攻击者可以通过(1)login.php、(2)stats.php、(3) detail.php或(4)erase.php的langfile参数中的URL执行任意PHP代码。
漏洞公告
参考网址
来源: BUGTRAQ
名称: 20071010 Vulnerabilities digest
链接:http://www.securityfocus.com/archive/1/archive/1/482006/100/0/threaded
来源: BUGTRAQ
名称: 20070822 Re: Vulnerabilities digest
链接:http://www.securityfocus.com/archive/1/archive/1/477363/100/0/threaded
来源: BUGTRAQ
名称: 20070821 Vulnerabilities digest
链接:http://www.securityfocus.com/archive/1/archive/1/477253/100/0/threaded
来源: BUGTRAQ
名称: 20060914 mcLinksCounter v1.1 – Remote File Include Vulnerabilities
链接:http://www.securityfocus.com/archive/1/archive/1/446062/100/0/threaded
来源: MISC
链接:http://securityvulns.com/source26994.html
来源: MISC
链接:http://securityvulns.com/Rdocument844.html
来源: BUGTRAQ
名称: 20060918 Re: mcLinksCounter v1.1 – Remote File Include Vulnerabilities
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=115860241806867&w=2