vendor:
ht://dig
by:
5.5
CVSS
MEDIUM
Arbitrary File Inclusion
CWE
Product Name: ht://dig
Affected Version From:
Affected Version To:
Patch Exists:
Related CWE:
CPE:
Platforms Tested: Unix
ht://dig Arbitrary File Inclusion
The ht://dig web content search engine for Unix platforms allows for file inclusion from configuration files. An attacker can specify any file for inclusion into a variable, leading to arbitrary file inclusion vulnerabilities.
Mitigation:
Ensure proper input validation and sanitization to prevent arbitrary file inclusion vulnerabilities. Limit access to sensitive files.
