Signature Detail
Short Name |
HTTP:PHP:COOLPHP-DIRTRAV |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
CoolPHP "op" Parameter Directory Traversal |
Release Date |
2004/11/03 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: CoolPHP "op" Parameter Directory Traversal
This signature detects directory traversal attempts against CoolPHP. Attackers can use this exploit to execute arbitrary scripts on the PHP server.
Extended Description
Reportedly CoolPHP is affected by multiple remote input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input prior to using it to make critical actions. An attacker can leverage these issues to steal cookie-based authentication credentials as well as carry out other malicious activities through cross-site scripting attacks. An attacker can also leverage this issue to execute arbitrary server-side scripts using file include attacks.
Affected Products
- CoolPHP Web Portal 1.0.0 -stable
References
- BugTraq: 11437
- CVE: CVE-2004-1600
- URL: http://cphp.sourceforge.net/
- URL: http://www.securityfocus.com/archive/1/378617