Detections
Analytics
KorWeblog < 1.6.2 Multiple Vulnerabilities
medium Nessus Plugin ID 15829
Language:
Synopsis
The remote web server hosts a PHP application that is affected by multiple vulnerabilities.Description
The remote host is using KorWeblog, a web-based log application written in PHP.According to its banner, the installed version of KorWeblog is earlier than 1.6.2. Such versions are affected by reportedly affected by several vulnerabilities that may allow execution of arbitrary PHP code or retrieval of files on the affected host, subject to the permissions under which the web server operates.
Solution
Upgrade to KorWeblog 1.6.2 or later.See Also
Plugin Details
Severity: Medium
ID: 15829
File Name: korweblog_directory_listing.nasl
Version: 1.20
Type: remote
Family: CGI abuses
Published: 11/24/2004
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: Medium
Base Score: 4.4
Temporal Score: 4.2
Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: No exploit is required
Vulnerability Publication Date: 11/23/2004