HTTP: Cedric Email Reader Remote PHP Code Inclusion (2)
This signature detects attempts to exploit a known vulnerability in Cedric Email Reader. Cedric Email Reader versions 0.2, 0.3, and 0.4 are vulnerable. Attackers can exploit the emailreader_execute_on_each_page.inc.php script to execute arbitrary code with the PHP script user privilege of the HTTP daemon.
Extended Description
Remote attackers could execute arbitrary code using the privileges of the logged in user.
References
Short Name
HTTP:PHP:CEDRIC-EMAIL-PHPINC2
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
(2) Cedric Code Email Inclusion PHP Reader Remote
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown