Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

HTTP:JOOMLA-WEBRING-RFI

Severity

High

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Joomla Webring Remote File Inclusion

Release Date

2013/04/25

Update Number

2258

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: Joomla Webring Remote File Inclusion


This signature detects attempts to exploit a known remote file inclusion vulnerability in Joomla Webring. A successful attack can result in arbitrary code execution and loss of sensitive information.

Extended Description

The Joomla Webring component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and to access the underlying system.

Affected Products

  • Joomla Webring Component 1.0

References

  • BugTraq: 19492

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out