?? 2356.txt
字號:
Rule: --Sid:2356--Summary:This event is generated when an attempt is made to exploit a knownvulnerability in the PHP web application WebChat.--Impact:Execution of arbitrary code on the affected system--Detailed Information:WebChat contains a flaw such that it may be possible for an attackerto include code of their choosing by manipulating the variableWEBCHATPATH when making a GET or POST request to a vulnerable system.It may be possible for an attacker to execute that code with theprivileges of the user running the webserver, usually root by supplyingtheir code in the file db_mysql.php.--Affected Systems: Webdev Webchat 0.77--Attack Scenarios:An attacker can make a request to an affected script and define theirown path for the WEBCHATPATH variable.--Ease of Attack:Simple. No exploit software required.--False Positives:None known--False Negatives:None known--Corrective Action:Apply the appropriate vendor supplied patchesUpgrade to the latest non-affected version of the software--Contributors:Sourcefire Vulnerability Research TeamNigel Houghton <nigel.houghton@sourcefire.com>-- Additional References:--
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -