vendor:
MyOWNspace_v8.2
by:
ItSecTeam
8,8
CVSS
HIGH
multi local file include
98
CWE
Product Name: MyOWNspace_v8.2
Affected Version From: MyOWNspace_v8.2
Affected Version To: MyOWNspace_v8.2
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
MyOWNspace_v8.2
MyOWNspace_v8.2 is vulnerable to multiple local file inclusion vulnerabilities. An attacker can exploit these vulnerabilities by sending a specially crafted HTTP request with malicious parameters. This can allow an attacker to include arbitrary files from the server, such as configuration files, which can lead to further exploitation.
Mitigation:
The best way to mitigate this vulnerability is to ensure that user input is properly sanitized and validated. Additionally, the application should be configured to only allow access to files that are necessary for the application to function.
