vendor:
jevoncms
by:
eidelweiss
8,8
CVSS
HIGH
Local File Inclusion (LFI) and Remote File Inclusion (RFI)
98, 94
CWE
Product Name: jevoncms
Affected Version From: -
Affected Version To: -
Patch Exists: NO
Related CWE: -
CPE: -
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: -
-
jevoncms (LFI/RFI) Multiple Vulnerabilities
jevoncms is vulnerable to both Local File Inclusion (LFI) and Remote File Inclusion (RFI) vulnerabilities. An attacker can exploit these vulnerabilities by sending a crafted HTTP request to the vulnerable application. The attacker can use the LFI vulnerability to read sensitive files from the server, while the RFI vulnerability can be used to execute malicious code on the server.
Mitigation:
To mitigate the LFI and RFI vulnerabilities, the application should validate user input and filter out any malicious characters. Additionally, the application should be configured to only allow access to the necessary files and directories.
