Gentoo: GLSA-200503-04 High: phpWebSite Arbitrary Execution Risk

Gentoo Linux Security Advisory GLSA 200503-04 https://security.gentoo.org/ Severity: High Title: phpWebSite: Arbitrary PHP execution and path disclosure Date: March 01, 2005 Bugs: #83297 ID: 200503-04

Synopsis ======= Remote attackers can upload and execute arbitrary PHP scripts, another flaw reveals the full path of scripts.
Background ========= phpWebSite provides a complete web site content management system.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phpwebsite < 0.10.0-r2 >= 0.10.0-r2
========== NST discovered that, when submitting an announcement, uploaded files aren't correctly checked for malicious code. They also found out that phpWebSite is...