S-126: Members Area System 'view_func.php' Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-126: Members Area System 'view_func.php' Vulnerability
# 1  
Old 01-22-2008
S-126: Members Area System 'view_func.php' Vulnerability

Members Area System is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. The risk is MEDIUM. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

4 More Discussions You Might Find Interesting

1. Cybersecurity

Web Hack Attempt from whois 209.126.68.6

Anyone care to take a stab at decoding this hack attempt on a web server. From the error logs: $ cat error.log (36)File name too long: AH00036: access to... (4 Replies)
Discussion started by: Neo
4 Replies

2. Shell Programming and Scripting

SFTP return Error Code 126

Hi, We are getting the following error code while connection remote server using sftp command. sftp user@serrver Warning: child process (/opt/ssh2/bin/ssh2) exited with code 126. pls Advise. (2 Replies)
Discussion started by: koti_rama
2 Replies

3. UNIX for Advanced & Expert Users

Exit Status 126 - how to get rid of it

Hi All, I have a small application hosted on apache-tomcat 5. Basically its a html page which in turn calls a perl script residing on unix server. Through this perl script i am calling a shell script using system command , like system('scriptname.sh',arg1,arg2,arg3); Now in the script... (5 Replies)
Discussion started by: glamo_2312
5 Replies

4. AIX

ar: 0707-126

Trying to build code on IBM_AIX 5.3. Following error occured during build. ar: 0707-126 $projdir/obj/ibm/5.3/NewApp/NewApp.o is not valid with the current object file mode. Use the -X option to specify the desired object mode. ANy help is appreciated to resolve the error. (2 Replies)
Discussion started by: milindb
2 Replies
Login or Register to Ask a Question
cd_suf(3)						     Library Functions Manual							 cd_suf(3)

NAME
cd_suf - Read System Use Field from a specified System Use Area on a Rock Ridge format CD-ROM LIBRARY
CD-ROM library (libcdrom.so, libcdrom.a) SYNOPSIS
#include <sys/cdrom.h> int cd_suf (path, fsec, signature, index, buf, buflen) char *path; int fsec; char signature[2]; int index; char *buf; int buflen; DESCRIPTION
Returns a System Use Field in the System Use Area for path. Points to a file or directory within the CD-ROM file hierarchy. Specifies the File Section of that file. The numbering starts with one. If fsec is set to -1, the System Use Area of the last File Section of that file is assumed. The 2-byte signature to look for and return from the System Use Area. The occurrence of signature to return. If signature is a NULL pointer, returns the System Use Field specified by index starting from the beginning of the System Use Area. Otherwise, returns the occurrence of signature specified by index. The index number of the first System Use Field of any signature is one. The buffer in which to place the System Use Field. The buffer length of buf. RETURN VALUES
The cd_suf function will return the number of bytes placed in buf if successful. The cd_suf function will return 0 if the signature field is not found. In case of error, -1 is returned and errno is set to indicate the error. ERRORS
The cd_suf() function will fail if: Search permission is denied for a component of the path prefix or read permission on the file or direc- tory pointed to by path is denied. The length of the path string exceeds {PATH_MAX} or a pathname component is longer than {NAME_MAX} while {_POSIX_NO_TRUNC} is in effect. A component of path does not exist or the path argument points to an empty string. The File Section indicated by fsec has no System Use Area. A component of the path prefix is not a directory. The address of buf, signature, or path is invalid. The value of fsec, index, or buflen is invalid. The argument path points to a file or directory not within a CD-ROM file hierar- chy. The Volume containing the File Section indicated by fsec is not mounted. The CD-ROM is not in the drive or a read error occurred. A signal was caught during the cd_suf() function. {OPEN_MAX} file descriptors are currently open in the calling process. [Tru64 UNIX] Either the OPEN_MAX value or the per-process soft descriptor limit is checked. The system file table is full. RELATED INFORMATION
Commands: cdsuf(1) Files: <sys/cdrom.h> delim off cd_suf(3)