PhpBook.Mail.Parameter.PHP.Code.Execution

Release Date Jan 05, 2010
Severity high
Impact System Compromise: Remote attackers can execute arbitrary code in vulnerable systems.
Description This indicates an attack attempt against a remote command-execution vulnerability in phpBook. A vulnerability has been reported in phpBook that may allow an attacker to execute shell commands on a vulnerable system. This is possible because the user input filters fail to properly sanitize the "mail" parameter value. An attacker may include shell commands by supplying an injection string through the URL.
Affected Products phpBook 1.3.2 and prior versions
Recommended Actions Currently we are not aware of any officially supplied patch for this issue.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2006-0075
Reference/s http://www.securityfocus.com/bid/16106 (BugTraq)

Fortinet