Detections
Analytics
YaBB SE < 1.5.2 Multiple Vulnerabilities
medium Nessus Plugin ID 11588
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple vulnerabilities.Description
The remote host is using the YaBB SE forum management system.According to its version number, this forum is vulnerable to a code injection bug that could allow an attacker with a valid account to execute arbitrary commands on this host by sending a malformed 'language' parameter in the web request.
In addition to this flaw, this version is vulnerable to other flaws such as SQL injection and directory traversal.
Solution
Upgrade to YaBB SE 1.5.2 or later.See Also
Plugin Details
Severity: Medium
ID: 11588
File Name: yabbse_cmd_exec.nasl
Version: 1.26
Type: remote
Family: CGI abuses
Published: 5/7/2003
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.5
CVSS v2
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 11/7/2000
Reference Information
CVE: CVE-2000-1176