vendor:
Seagull
by:
FoX HaCkEr
7,5
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: Seagull
Affected Version From: 0.6.7
Affected Version To: 0.6.7
Patch Exists: YES
Related CWE: N/A
CPE: a:seagull_project:seagull:0.6.7
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
seagull-0.6.7 <===remote file inclode
Seagull is a web application framework written in PHP. A remote file inclusion vulnerability exists in Seagull version 0.6.7. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable application. This can allow the attacker to execute arbitrary code on the vulnerable system.
Mitigation:
The application should validate user input and filter out any malicious code. The application should also be configured to use the latest version of the software.
