vendor:
Multi-Page Comment System (MPCS)
by:
v1per-haCker
9,3
CVSS
HIGH
Remote File Inclusion (RFI)
98
CWE
Product Name: Multi-Page Comment System (MPCS)
Affected Version From: 1.0.0
Affected Version To: 1.0.0
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
Multi-Page Comment System (RFI)
The Multi-Page Comment System (MPCS) is vulnerable to a Remote File Inclusion (RFI) vulnerability. An attacker can exploit this vulnerability by sending a malicious URL in the 'path' parameter of the 'include.php' and 'functions.php' scripts. This will allow the attacker to execute arbitrary code on the vulnerable system.
Mitigation:
The best way to mitigate this vulnerability is to ensure that user input is properly sanitized and validated before being used in the application.