Description (CNA)
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.osvdb.org/8266
- http://www.securityfocus.com/bid/10812
- http://marc.info/?l=bugtraq&m=109095196526490&w=2
- http://securitytracker.com/id?1010788
- http://secunia.com/advisories/12173
- http://www.osvdb.org/8265
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16817
ADP enrichment
No English description supplied.