BasiliX login.php3 username Variable Arbitrary Command Execution

medium Nessus Plugin ID 14304

Language:

Synopsis

The remote web server contains a PHP script that is prone to arbitrary command execution.

Description

The remote host appears to be running a version of BasiliX between 1.0.2beta or 1.0.3beta. In such versions, the script 'login.php3' fails to sanitize user input, which enables a remote attacker to pass in a specially crafted value for the parameter 'username' with arbitrary commands to be executed on the target using the permissions of the web server.

Solution

Upgrade to BasiliX version 1.1.0 or later.

Plugin Details

Severity: Medium

ID: 14304

File Name: basilix_arbitrary_command_execution.nasl

Version: 1.19

Type: remote

Family: CGI abuses

Published: 8/9/2004

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: www/basilix

Exploit Available: true

Exploit Ease: No exploit is required

Reference Information

BID: 3276

Detections

Analytics