vendor:
Gbook MX
by:
indoushka
7,5
CVSS
HIGH
RFI
98
CWE
Product Name: Gbook MX
Affected Version From: Gbook MX v4.1.0
Affected Version To: Gbook MX v4.1.0
Patch Exists: NO
Related CWE:
CPE: a:magtrb_soft:gbook_mx:4.1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux
Gbook MX v4.1.0 Arabic Version File inclusion Vulnerability
Gbook MX v4.1.0 is vulnerable to a remote file inclusion vulnerability. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. The malicious request contains a URL pointing to a malicious file hosted on a remote server. If the vulnerable server is configured to allow remote file inclusion, the malicious file will be executed on the vulnerable server.
Mitigation:
To mitigate this vulnerability, the application should be configured to only allow the inclusion of files from trusted sources. Additionally, the application should be configured to only allow the inclusion of files with specific extensions.
