vendor:
PeopleAggregator
by:
Unknown
7.5
CVSS
HIGH
Remote File Inclusion
CWE
Product Name: PeopleAggregator
Affected Version From: 1.2pre6
Affected Version To: 1.2pre6
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Unknown
Unknown
PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities
Multiple remote file inclusion vulnerabilities exist in PeopleAggregator 1.2pre6. These vulnerabilities allow an attacker to include arbitrary files from remote servers, potentially leading to remote code execution or information disclosure.
Mitigation:
To mitigate these vulnerabilities, it is recommended to update to a patched version of PeopleAggregator or apply relevant security patches provided by the vendor.