vendor:
pSys
by:
RoMaNcYxHaCkEr
7.5
CVSS
HIGH
Remote File Include
98
CWE
Product Name: pSys
Affected Version From: 0.7.0 Alpha
Affected Version To: 0.7.0 Alpha
Patch Exists: NO
Related CWE: N/A
CPE: powie.de
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
pSys v0.7.0 Alpha Multiple Remote File Include
pSys is a module based PHP Script which is vulnerable to multiple Remote File Include vulnerabilities. The vulnerability exists in different files and in different variables and lines. An attacker can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server.
Mitigation:
Disable register_globals and use input validation to prevent malicious input from being passed to the vulnerable script.
