Detections
Analytics
dotProject Multiple Scripts Remote File Inclusion
high Nessus Plugin ID 20925
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple remote file include vulnerabilities.Description
The remote host is running dotProject, a web-based, open source, project management application written in PHP.The installed version of dotProject fails to sanitize input to various parameters and scripts before using it to include PHP code. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker may be able to exploit these flaws to view arbitrary files on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts.
Solution
Disable PHP's 'register_globals' setting as per the application's installation instructions.See Also
https://www.securityfocus.com/archive/1/424957/30/0/threaded
http://www.nessus.org/u?f8153914
https://www.securityfocus.com/archive/1/425285/100/0/threaded
Plugin Details
Severity: High
ID: 20925
File Name: dotproject_file_includes.nasl
Version: 1.27
Type: remote
Family: CGI abuses
Published: 2/15/2006
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:dotproject:dotproject
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 2/14/2006