Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Date: Thu May 06 2010 - 19:10:44 CDT
REZERVI 3.0.2 Remote Command Execution Vulnerability
-- Vulnerability Details:
This vulnerability allows remote attackers to execute arbitrary code on
vulnerable in directory "PATH/rezervi/include/mail.inc.php" with input "root" . Authentication is not
required to exploit this vulnerability.
# RFI Vulnerability! : [PATH/rezervi/include/mail.inc.php]
# Because $root is not specific here , so attacker got RFI vulnerability and can exploit with Remote Command Execution (RCE) to upload or execute arbitrary shell code.
REZERVI 3.0.2 is Affected; Other or lowers version may also be affected.