LXer: Yrch! "path" Parameter Handling Remote PHP File Inclusion ...

		LinuxQuestions.org > Forums > Linux Forums > Linux - News > Syndicated Linux News
LXer: Yrch! "path" Parameter Handling Remote PHP File Inclusion ...

Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.

Notices

Welcome to LinuxQuestions.org, a friendly and active Linux Community.

You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!

Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.

Are you new to LinuxQuestions.org? Visit the following links:
Site Howto | Site FAQ | Sitemap | Register Now

If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.

Having a problem logging in? Please visit this page to clear all LQ-related cookies.

Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.

Exclusive for LQ members, get up to 45% off per month. Click here for more info.

Search this Thread

12-29-2006, 11:33 PM	#1
LXer LXer NewsBot Registered: Dec 2005 Posts: 128,378 Rep:	LXer: Yrch! "path" Parameter Handling Remote PHP File Inclusion ... Published at LXer: A vulnerability has been identified in Yrch!, which could be exploited by attackers to execute arbitrary commands. This issue is due to an input validation error in the "yrch/plugins/metasearch/plug.inc.php" script that does not validate the "path" parameter, which could be exploited by remote attackers to include malicious PHP scripts and execute arbitrary commands with the privileges of the web server. Read More...

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
LXer: Hlstats "killLimit" Parameter Handling Remote SQL Query Injection ...	LXer	Syndicated Linux News	0	12-29-2006 07:54 PM
LXer: Gnu Tar "GNUTYPE_NAMES" Record Handling Directory Traversal ...	LXer	Syndicated Linux News	0	11-28-2006 05:54 AM
shell script to mount samba share with " " in the remote path	dohpaz	Programming	2	10-20-2006 02:18 PM
Tip: handling "cannot open shared object file..."	sundialsvcs	Linux - Newbie	1	03-06-2006 12:57 PM
Cedega and Fat32 (Invalid path "." given for "--use-dos-cwd")	bdox	Linux - Games	0	03-26-2005 02:48 AM

All times are GMT -5. The time now is 10:38 AM.

Main Menu

(Con't)

My LQ

Write for LQ

LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.

Main Menu

Syndicate

Latest Threads

LQ News

Twitter: @linuxquestions