Description (CNA)
mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php
- https://www.exploit-db.com/exploits/5232
- http://www.securityfocus.com/bid/28195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41131
- http://secunia.com/advisories/29329
ADP enrichment
No English description supplied.