Traq.Authenticate.Function.Remote.Code.Execution

Description

This indicates an attack attempt against a Remote Command Execution vulnerability in in Traq.
The vulnerability is caused by a broken authorization schema which doesn't stop the execution flow from an unauthorized user. It allows a remote attacker to execute arbitrary code via sending a crafted HTTP request.

Affected Products

Traq 2.0 to 2.3

Impact

System Compromise: Remote attackers can remote execute arbitrary code.

Recommended Actions

Upgrade to the latest version, available from the website.

References