vendor:
Extract Website
by:
Cold z3ro
7.5
CVSS
HIGH
Local File Include
98
CWE
Product Name: Extract Website
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Extract Website (download.php filename) Local File Include
This exploit allows an attacker to include a file on the server through the web application. The vulnerability is present when a web application allows the user to submit input into files or upload files to the server. The malicious user can then insert a file path that will allow the execution of a file on the web server. This can lead to the disclosure of sensitive information, manipulation of data, or even server compromise.
Mitigation:
Input validation should be used to prevent the inclusion of files from outside the intended directory.
