HTTP: Cedric Email Reader Remote PHP Code Inclusion (1)

This signature detects attempts to exploit a known vulnerability in Cedric Email Reader. Cedric Email Reader versions 0.2, 0.3, and 0.4 are vulnerable. Attackers can exploit the email.php script to execute arbitrary code with the PHP script user privilege of the HTTP daemon.

Extended Description

Remote attackers could execute arbitrary code using the privileges of the logged in user.

References

URL: http://securityvulns.com/docs4070.html

Short Name

HTTP:PHP:CEDRIC-EMAIL-PHPINC1

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Cedric Email Reader Remote PHP Code Inclusion (1)

Extended Description

References

Found a potential security threat?