Signature Detail
Short Name |
HTTP:PHP:PHPROJEKT-INC |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
phprojekt |
Release Date |
2005/01/10 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: PHProjekt "path_pre" Parameter Remote File Include
This signature detects attempts to exploit a vulnerability in the authform.inc.php script included in the PHProjekt package. Attackers can supply a remote location in the "path_pre" input parameter to force the target to download and execute arbitrary PHP code from the remote location.
Extended Description
Remote attackers could exploit this vulnerability to execute arbitrary code on an affected machine.
References