Nessus Plugin #15450

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

BlackBoard Internet Newsboard System remote file include flaw

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks BlackBoard Internet Newsboard System version

Version:

$Revision: 1.2 $

Cve_id:

-

Bugtraq_id:

11336

Xrefs:

-

Description:

The remote host is running the BlackBoard Internet Newsboard System,
an open-source PHP-based internet bulletin board software.

The remote version of this software is vulnerable to a remote file
include flaw due to a lack of sanitization of user-supplied data.

Successful exploitation of this issue may allow an attacker to execute
malicious script code on a vulnerable server.

*** Nessus reports this vulnerability using only
*** information that was gathered. Therefore,
*** this might be a false positive.

Solution: Upgrade to the newest version of this software
Risk factor : High