vendor:
ACal
by:
PiNGuX
7,5
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: ACal
Affected Version From: 2.2.6
Affected Version To: 2.2.6
Patch Exists: NO
Related CWE: N/A
CPE: acalproj.sourceforge.net
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
ACal 2.2.6 = Remote File Inclusion
A Remote File Inclusion (RFI) vulnerability exists in ACal 2.2.6. An attacker can exploit this vulnerability by sending a malicious URL to the vulnerable application. The malicious URL contains a malicious file hosted on a remote server. When the vulnerable application processes the malicious URL, the malicious file is executed on the vulnerable system.
Mitigation:
To mitigate this vulnerability, the application should filter user input and validate the URL before processing it.
