vendor:
PHP File Sharing System
by:
blake
8,8
CVSS
HIGH
XSS, Directory transversal, Shell through file upload, Intercept requests
79, 22, 264, 693
CWE
Product Name: PHP File Sharing System
Affected Version From: 1.5.1
Affected Version To: 1.5.1
Patch Exists: YES
Related CWE: N/A
CPE: a:php_file_sharing_system:php_file_sharing_system:1.5.1
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3 with xampplite
2020
PHP File Sharing System 1.5.1 Multiple Vulnerabilities
The PHP File Sharing System 1.5.1 is vulnerable to XSS, Directory transversal, Shell through file upload and Intercept requests. An attacker can exploit these vulnerabilities by sending a malicious request to the server. The malicious request can be used to upload a PHP shell, traverse the directory structure, and intercept requests to delete system files.
Mitigation:
The application should be updated to the latest version and all the security patches should be applied. The application should be tested for any vulnerabilities and the security measures should be implemented to prevent any malicious requests.
