VULHUB ™

BXCP is reported prone to an access restriction bypass vulnerability. It is reported that due to a lack of input sanitization the 'show' URI parameter passed to the 'index.php' script can be used to render any PHP script that resides on a vulnerable computer. A remote attacker may exploit this vulnerability to render PHP scripts that are supposed to be restricted. The vulnerability may also be exploited by an attacker that has local access to a target computer to run arbitrary PHP code with the privileges of the web server process.

BXCP is reported prone to an access restriction bypass vulnerability. It is reported that due to a lack of input sanitization the 'show' URI parameter passed to the 'index.php' script can be used to render any PHP script that resides on a vulnerable computer. A remote attacker may exploit this vulnerability to render PHP scripts that are supposed to be restricted. The vulnerability may also be exploited by an attacker that has local access to a target computer to run arbitrary PHP code with the privileges of the web server process.