Signature Detail

HTTP: Php Generic MembreManager.PHP Remote File Include

This signature detects attempts to exploit a known remote file inclusion vulnerability in PhP Generic Library & Framework for comm (g-neric). It is due to insufficient validation of user-supplied input. A remote attacker can exploit this by enticing a target to open a malicious URL link. A successful attack can result in arbitrary code execution and loss of sensitive information.

Extended Description

PhP Generic is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

Affected Products

• G-neric PhP G-neric

References

• BugTraq: 22287
• CVE: CVE-2007-0584