vendor:
AINS
by:
ThE dE@Th
7.5
CVSS
HIGH
Remote File Include
Not provided
CWE
Product Name: AINS
Affected Version From: 0.02b
Affected Version To: 0.02b
Patch Exists: NO
Related CWE: Not provided
CPE: Not provided
Platforms Tested:
2007
AINS 0.02b – Remote File Include Vulnerabilities
This vulnerability allows remote attackers to include arbitrary files via a URL in the ains_path parameter in ains_main.php.
Mitigation:
The vendor should sanitize user input before including files to prevent remote file inclusion attacks.
