(PVS) Signatures - Tenable Network Security

Solution: Ensure that this application is authorized according to corporate policies and guidelines.
CVE Not available
Mambo / Joomla Component / Module mosConfig_absolute_path Parameter Remote File Inclusion
PVS ID: 3687 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:22049
Description: Synopsis :\n\nThe remote web server contains a PHP application that is prone to remote file
inclusion attacks.\n\nThe remote host contains a third-party Mambo / Joomla component or
module. The version of at least one such component or module installed on the remote host
fails to sanitize input to the 'mosConfig_absolute_path' parameter before using it to include
PHP code. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker
may be able to exploit these flaws to view arbitrary files on the remote host or to execute
arbitrary PHP code, possibly taken from third-party hosts.
Solution: Disable PHP's 'register_globals' setting. Upgrade or patch according to vendor
recommendations.
CVE-2006-6962
IceWarp < 5.6.1 lang_settings Parameter Remote File Inclusion
PVS ID: 3688 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:22079
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
is running IceWarp Web Mail, a webmail product written in PHP that is distributed as a
standalone application and also bundled with VisNetic Mail Server and Merak Mail Server.
The version of IceWarp Web Mail installed on the remote host fails to sanitize
user-supplied input to the 'lang_settings' parameter of the 'accounts/inc/include.php' and
'admin/inc/include.php' scripts before using it to include PHP code. An unauthenticated
attacker may be able to exploit these flaws to view arbitrary files on the remote host or to
execute arbitrary PHP code after injecting it into the mail server's log file.
Solution: Upgrade to version 5.6.1 or higher.
CVE-2006-0818
Passive Vulnerability Scanner (PVS) Signatures
MyBB < 1.1.6 HTTP Header CLIENT-IP Field SQL Injection
PVS ID: 3689 FAMILY: CGI RISK: HIGH NESSUS ID:22055
Description: Synopsis :\n\nThe remote web server contains a PHP application that is susceptible to a
SQL injection attack.\n\nThe remote version of MyBB fails to sanitize input to the
'CLIENT-IP' request header before using it in a database query when initiating a sesion in
'inc/class_session.php'. This may allow an unauthenticated attacker to uncover sensitive
information such as password hashes, modify data, launch attacks against the underlying
database, and more. Note that successful exploitation is possible regardless of PHP's
settings.
Family Internet Services 953