vendor:
HBR 1.3
by:
Ghost Hacker [ R-H TeaM ]
7.5
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: HBR 1.3
Affected Version From: 1.3
Affected Version To: 1.3
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
HBR 1.3 (hm) Remote File Inclusion Vulnerability
HBR 1.3 (hm) is vulnerable to a remote file inclusion vulnerability. An attacker can exploit this vulnerability by sending a malicious URL to the vulnerable script. The malicious URL contains the path to the malicious file which will be included and executed on the vulnerable server.
Mitigation:
The best way to mitigate this vulnerability is to ensure that user input is properly sanitized and validated before being used in the application. Additionally, the application should be configured to only allow access to files from a specific directory.
