Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, which is passed to an eval call.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netjuke | Netjuke | 1.0_b1 (including) | 1.0_b1 (including) |
| Netjuke | Netjuke | 1.0_b2 (including) | 1.0_b2 (including) |
| Netjuke | Netjuke | 1.0_b3 (including) | 1.0_b3 (including) |
| Netjuke | Netjuke | 1.0_b4 (including) | 1.0_b4 (including) |
| Netjuke | Netjuke | 1.0_b5 (including) | 1.0_b5 (including) |
| Netjuke | Netjuke | 1.0_b6 (including) | 1.0_b6 (including) |
References
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=507312\u0026group_id=42076\u0026atid=432052
- http://www.securityfocus.com/bid/3988
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8101
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=507312\u0026group_id=42076\u0026atid=432052
- http://www.securityfocus.com/bid/3988
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8101