vendor:
Podcast Generator
by:
ANA TRYAGI
7.5
CVSS
HIGH
Remote File Inclusion/File Disclosure
94
CWE
Product Name: Podcast Generator
Affected Version From: 1.0 BETA 2
Affected Version To: 1.0 BETA 2
Patch Exists: YES
Related CWE: N/A
CPE: a:podcastgen:podcast_generator:1.0_beta_2
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities
Podcast Generator version 1.0 BETA 2 is vulnerable to Remote File Inclusion and File Disclosure. The vulnerable files are loadparser.php, admin.php, categories.php, categories_add.php, categories_remove.php, edit.php, editdel.php, ftpfeature.php, login.php, pgRSSnews.php, showcat.php, upload.php, archive_cat.php, archive_nocat.php, recent_list.php, themes.php and download.php. An attacker can exploit these vulnerabilities to include malicious files from remote locations and disclose sensitive information from the server.
Mitigation:
Upgrade to the latest version of Podcast Generator or apply the patch provided by the vendor.
