Intrusion Prevention

Open.Flash.Chart.PHP.File.Upload

Description

This indicates an attack attempt against an Arbitrary File Upload vulnerability in Open Flash Chart.
The vulnerability is caused by an error when the vulnerable software handles a malicious HTTP request with a crafted URI. It allows a remote attacker to upload an arbitrary file via sending a crafted URI to a vulnerable application.

Affected Products

OpenEMR 4.1.1
Piwik Piwik 0.4.3
Piwik Piwik 0.4.2
Piwik Piwik 0.4.1
Piwik Piwik 0.4
Piwik Piwik 0.2.37
Piwik Piwik 0.2.36
Piwik Piwik 0.2.35
OpenX OpenX Video Plugin
OpenX OpenX 2.8.2
OpenX OpenX 2.8.6
OpenX OpenX 2.8.5
OpenX OpenX 2.8.4
OpenX OpenX 2.8.3
Open Web Analytics Open Web Analytics 1.2.0
Open Flash Chart Open Flash Chart 2.0
Joobi Ltd jNews

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.

CVE References

CVE-2009-4140