Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Jinzora Include_Path Multiple Remote File Include Vulnerabilities

Multiple remote file-include vulnerabilities affect Jinzora because the application fails to properly sanitize user-supplied input before using it in a PHP 'include()' function call.

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process.

Jinzora 2.7 and prior versions are vulnerable to this issue; other versions may also be affected.







 

Privacy Statement
Copyright 2009, SecurityFocus