vendor:
by:
Bl0od3r
5.5
CVSS
MEDIUM
Remote File Inclusion
CWE
Product Name:
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2007
CGI Remote File Inclusion Vulnerability
This exploit allows an attacker to include remote files in a vulnerable CGI script. By manipulating the 'Name' parameter, an attacker can include arbitrary files from a remote server. This can lead to remote code execution or information disclosure.
Mitigation:
To mitigate this vulnerability, ensure that all user input is properly validated and sanitized before being used in include statements. Additionally, consider using a whitelist approach to limit the files that can be included.
