PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Proventia_network_ips_gx5008 | Ibm | 1.5 (including) | 1.5 (including) |
| Proventia_network_ips_gx5108 | Ibm | 1.3 (including) | 1.3 (including) |
References
- http://osvdb.org/36474
- http://secunia.com/advisories/25979
- http://www.sybsecurity.com/hack-proventia-1.pdf
- http://www.vupen.com/english/advisories/2007/2545
- http://osvdb.org/36474
- http://secunia.com/advisories/25979
- http://www.sybsecurity.com/hack-proventia-1.pdf
- http://www.vupen.com/english/advisories/2007/2545