vendor:
mini-pub
by:
muuratsalo
7.5
CVSS
HIGH
Local File Disclosure, Command Execution
22, 78
CWE
Product Name: mini-pub
Affected Version From: 0.3
Affected Version To: 0.3
Patch Exists: Yes
Related CWE: N/A
CPE: mini-pub
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
mini-pub 0.3 multiple vulnerabilities
The mini-pub 0.3 application is vulnerable to local file disclosure and command execution. An attacker can exploit this vulnerability by sending a crafted HTTP request to the vulnerable application. For example, an attacker can send a request to the vulnerable application with a malicious file name parameter to disclose the content of the file. Similarly, an attacker can send a request with a malicious command to execute the command on the vulnerable application.
Mitigation:
The vendor has released a patch to address this vulnerability. Users are advised to upgrade to the latest version of the application.
