RSS Feed

OSCommerce Remote File Include

Thu, 04/30/2009 - 22:09 — victor
Name: 
Zeroboard PHP File Command Execution
Filename: 
cgi.db
SPID: 
2916
Impact: 
The identified file /_head.php known to be part of the Zeroboard is subject to a vulnerability where it is possible for a remote user to execute arbitrary code. This could lead to a system compromise.
Solution: 
Please upgrade to the latest version of this software from http://nzeo.com/ NOTE* This site can be in foreign language Korean. And there click on Download.
Risk: 
High