Signature Detail
Short Name |
HTTP:PHP:ULTIMATE-PHP-CODE-EXEC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Ultimate PHP Board User Agent Code Execution |
Release Date |
2013/05/06 |
Update Number |
2260 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Ultimate PHP Board User Agent Code Execution
This signature detects attempts to exploit a known vulnerability against Ultimate PHP Board. A successful attack can lead to arbitrary code execution.
Extended Description
A vulnerability has been reported in Ultimate PHP Board. The problem is said to occur due to insufficient sanitization of user-supplied input before including log data into a PHP file. As a result, it may be possible for a remote attacker to execute arbitrary PHP commands within the context of the web server. The execution of these commands would only occur when an administrator chooses to view the log of forum activity via the 'admin_iplog.php' script.
Affected Products
- Ultimate PHP Board 1.9.0
References
- BugTraq: 7678
- CVE: CVE-2003-0395