|
Description
|
|
A vulnerability has been reported in ClipShare, which can be exploited by malicious people to compromise a vulnerable system.
Input passed via the "config_file" GET parameter to /ubr_link_upload.php is not properly verified before being used to include files. This can be exploited to execute arbitrary PHP code by including files from local or remote resources.
Successful exploitation requires the MULTI_CONFIGS_ENABLED option to be enabled (disabled by default).
The vulnerability is reported in version 4.1. Other versions may also be affected.
|
|
|
|
|
|
Vulnerable Products
|
|
Vulnerable Software:
ClipShare 4.x
|
|
|
|
|
|
Solution
|
|
No official solution is currently available.
|
|
|
|
|
|
CVE
|
|
|
|
|
|
|
|
References
|
|
http://www.exploit-db.com/exploits/32131/
|
|
|
|
|
|
Vulnerability Manager Detection
|
|
No
|
|
|
|
|
|
IPS Protection
|
|
|
|
|
|
|
