Categories

Applications (222)
Blogs (7)
Content Management (148)
Customer Relationship (2)
Discussion Boards (29)
E-Commerce (14)
General Purpose Directories (2)
Image Galleries (18)
Mailing Lists (1)
Tips (3)
Vulnerabilities (337)
Access Bypass (50)
Cross Site Scripting (123)
Denial Of Service (2)
File Inclusion (51)
Information Disclosure (15)
Privilege Escalation (2)
Remote Command Execution (16)
Session Hijacking (2)
SQL Injection (130)
« Web Calendar Pro “user_id” SQLi
MegaBBS SQLi and XSS »

KwsPHP “action” Local File Inclusion and Code Execution

Published by TL Guan May 20th, 2008 in File Inclusion and Remote Command Execution.

Application: KwsPHP
Affected Version: Version 1.3.456 downloaded before 2008-04-16 and other versions.
Vendor’s URL: KwsPHP
Bug Type: File Inclusion and Code Execution
Risk Level: Critical

Solution:
Update to version 1.3.456 downloaded on or after 2008-04-16 and apply official patch.

Subscribe

Latest

Archives



Valid XHTML 1.0 Transitional