vendor:
gnuedu
by:
GolD_M = [Mahmood_ali]
5.5
CVSS
MEDIUM
Remote File Inclusion
22
CWE
Product Name: gnuedu
Affected Version From: 1.3b2
Affected Version To: 1.3b2
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2007
gnuedu 1.3b2 Multiple Remote File Inclusion Vulnerabilities
The gnuedu 1.3b2 software is vulnerable to multiple remote file inclusion vulnerabilities. An attacker can exploit these vulnerabilities by including a remote file in the affected script, which can lead to remote code execution.
Mitigation:
Apply the latest patches and updates from the vendor. Restrict access to the affected scripts to trusted IP addresses. Regularly monitor and review logs for any suspicious activity.
