Intrusion PreventionOpen.Conference.Systems.Fullpath.Remote.File.Inclusion
Description
It indicates a possible exploit of a remote file inclusion vulnerability in Open Conference Systems (OCS) that may allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter.
Affected Products
Open Conference Systems Open Conference Systems 1.1.3
Impact
System compromise.
Recommended Actions
The vendor has released 1.1.6 to addresses this issue.
http://pkp.sfu.ca/ocs/download/ocs-1.1.6.tar.gz
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14265 |
| Created | Mar 06, 2007 |
| Updated | Feb 13, 2023 |
| Risk |
|
| CVE ID | CVE-2006-5308 |
| Exploit Prediction Score | 36.2% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |