Application: WebSpell CMS
Version: 4.01.02 or earlier
Vendor’s URL: http://cms.webspell.org/
Bug Type: Information Leaking
Risk: Low
Criteria:
- register_globals must be enabled.
- PHP version prior to 4.3.0 must be used
Solution:
- Waiting for official patch or update
- Edit the source code to ensure the input is properly sanitized
0 Responses to “WebSPELL “picture.php” Information Leaking”