what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

NDSA20071016.txt

Posted Oct 22, 2007

Authored by Tim Brown | Site nth-dimension.org.uk

Nth Dimension Security Advisory (NDSA20071016) - The SiteBar application has single high risk issues with its translation module. It can can be made to retrieve any file to which the web server user has read access. The SiteBar application has multiple high risk issues with its translation module. It can be made to execute arbitrary code to gain remote access as the web server user typically nobody. The SiteBar application has multiple medium risk issues where it is vulnerable to Javascript injection within the requested URL. The SiteBar application has single medium risk issue where it is vulnerable to malicious redirects within the requested URL. Version 3.3.8 is affected.

tags | exploit, remote, web, arbitrary, javascript

advisories | CVE-2006-3320, CVE-2007-5492, CVE-2007-5491

SHA-256 | f9787ab6aeb07593ce7cda6de093a36855c1a84a926762bb230871ba4fa62bdb

Download | Favorite | View

Related Files

No related files