vendor:
CMS
by:
indoushka
8,8
CVSS
HIGH
Location Replace and RFI
94
CWE
Product Name: CMS
Affected Version From: V1.5
Affected Version To: V1.5
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)
2010
deV!L`z Clanportal V1.5 Mullti Vulnerability
The vulnerability allows an attacker to inject malicious code into the vulnerable application. The attacker can inject malicious code into the vulnerable application by using the 'Location Replace' and 'RFI' techniques. The attacker can use the 'Location Replace' technique to inject malicious code into the vulnerable application by sending a crafted URL to the vulnerable application. The attacker can use the 'RFI' technique to inject malicious code into the vulnerable application by sending a crafted URL to the vulnerable application. The attacker can also use the 'RFI' technique to gain access to sensitive information stored on the vulnerable application.
Mitigation:
The application should be configured to only accept requests from trusted sources. The application should also be configured to validate all user input and reject any malicious input.
