(PVS) Signatures - Tenable Network Security

exploitation, the attacker would be able to execute arbitrary commands with the rights of
the web server.
Solution: Upgrade to version 7.13.1 or higher.
CVE-2005-0490
phpBB < 2.0.12 Path Disclosure / Unauthorized unlink() Function Access
PVS ID: 2641 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running phpBB, a web-based forum application written in PHP. There is a flaw in this
version of phpBB that will allow a remote attacker to disclose paths. This sort of
information may be useful for further attacks.\nThere is another flaw within the
usercp_avatar.php script that would allow a remote user to pass arbitrary files to the
unlink() function. The unlink() function deletes files. A successful attack would delete
arbitrary files on the web server.
Solution: Upgrade to version 2.0.12 or higher.
CVE-2005-0259
vBulletin < 3.0.7 misc.php PHP Code Injection
PVS ID: 2642 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe remote
host is running a version of vBulletin, a forum application implemented in PHP, that is
vulnerable to a flaw in the misc.php script. The flaw allows a remote attacker the ability to
execute PHP code on the server. An attacker exploiting this flaw would pass malformed
data to the 'template' parameter of the misc.php script.
Solution: Upgrade to version 3.0.7 or higher.
CVE-2005-0511
PBLang Bulletin Board Multiple HTML Injection and XSS
PVS ID: 2643 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:17209
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running PBLang, a bulletin board system written in PHP. This version of PBLang is
vulnerable to a remote Cross-Site Scripting (XSS) flaw. In addition, this version of PBLang
is vulnerable to an HTML injection flaw within the pmpshow.php script. An attacker
exploiting these flaws would be need to be able to convince a user to click on a malicious
URL. Upon successful exploitation, the attacker would be able to steal credentials or
execute code within the browser. A third flaw, which does not require user interaction, has
Family Internet Services 675