vendor:
bubbling library
by:
Stack-Terrorist [v40]
7.5
CVSS
HIGH
Local File Inclusion
98
CWE
Product Name: bubbling library
Affected Version From: v1.32
Affected Version To: v1.32
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
bubbling library v1.32 multiple Local File Inclusion Vulnerabilities
bubbling library v1.32 is vulnerable to multiple Local File Inclusion vulnerabilities. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. The attacker can include a local file on the server by using the vulnerable parameters page, tpl, uri, etc. This can lead to the disclosure of sensitive information such as system and application data, and may lead to further attacks.
Mitigation:
The best way to mitigate this vulnerability is to restrict access to the vulnerable parameters and validate the user input.
