vendor:
Opt-X
by:
SecurityFocus
7.5
CVSS
HIGH
Remote File Include
98
CWE
Product Name: Opt-X
Affected Version From: 2000.7.2
Affected Version To: 2000.7.2
Patch Exists: N/A
Related CWE: N/A
CPE: optx
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2004
Opt-X Remote File Include Vulnerability
It has been reported that Opt-X may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The problem reportedly exists because remote users may influence the 'systempath' variable in the header.php module.
Mitigation:
Ensure that user input is properly sanitized and validated before being used in the systempath variable.
