CVE

Id
8076  
CVE No.
CVE-2003-1252  
Status
Candidate  
Description
register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name ends in a .php extension and entering the desired commands into the E-mail field, which creates a web-accessible .php file that can be called by the attacker, as demonstrated using a "system($cmd)" E-mail address with a "any_name.php" username.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
48880 8076 CVE-2003-1252 VULNWATCH:20030105 A security vulnerability in S8Forum  View
48881 8076 CVE-2003-1252 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0004.html  View
48882 8076 CVE-2003-1252 BUGTRAQ:20030105 A security vulnerability in S8Forum  View
48883 8076 CVE-2003-1252 URL:http://www.securityfocus.com/archive/1/305406  View
48884 8076 CVE-2003-1252 SECTRACK:1005881  View
48885 8076 CVE-2003-1252 URL:http://www.securitytracker.com/id?1005881  View
48886 8076 CVE-2003-1252 SECUNIA:7819  View
48887 8076 CVE-2003-1252 URL:http://secunia.com/advisories/7819  View
48888 8076 CVE-2003-1252 XF:s8forum-register-command-execution(10974)  View
48889 8076 CVE-2003-1252 URL:http://www.iss.net/security_center/static/10974.php  View
48890 8076 CVE-2003-1252 BID:6547  View

Related JVN