header-logo
Suggest Exploit
vendor:
Jax Petitionbook
by:
Unknown
7.5
CVSS
HIGH
Local File Inclusion
22
CWE
Product Name: Jax Petitionbook
Affected Version From: 1.0.3.06
Affected Version To: Unknown
Patch Exists: NO
Related CWE: Unknown
CPE: a:jax_petitionbook:jax_petitionbook:1.0.3.06
Metasploit:
Other Scripts:
Platforms Tested: Unknown
Unknown

Jax Petitionbook Local File Inclusion Vulnerability

Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execute in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

Mitigation:

Implement proper input validation and sanitization to prevent directory-traversal attacks. Ensure that user-supplied input is properly validated and restricted to legitimate values or paths.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/22072/info

Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execute in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

These issues affect version 1.0.3.06; other versions may also be vulnerable. 

http://www.example.com/jax_petitionbook.php?language=../../example_file.xxx%00?

Navigation

Suggest Exploit

Services By CQR