vendor:
DomPHP
by:
HouSSaMix From H-T Team
7.5
CVSS
HIGH
Local File Inclusion
98
CWE
Product Name: DomPHP
Affected Version From: 0.82
Affected Version To: 0.82
Patch Exists: YES
Related CWE: N/A
CPE: a:domphp:domphp:0.82
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
DomPHP 0.82 Local File Inclusion
A local file inclusion vulnerability exists in DomPHP 0.82. An attacker can exploit this vulnerability to include arbitrary files from the local system. This can be exploited to gain access to sensitive information or execute arbitrary code on the vulnerable system. The vulnerable code is located in the /aides/index.php file. The code allows an attacker to include arbitrary files from the local system by sending a specially crafted HTTP request containing directory traversal characters. This can be exploited to include arbitrary files from the local system.
Mitigation:
Upgrade to the latest version of DomPHP 0.82 or apply the patch provided by the vendor.
