vendor:
SimpCMS Light
by:
Dr.RoVeR (Arab48 Hacker)
7.5
CVSS
HIGH
Arbitrary File Inclusion
98
CWE
Product Name: SimpCMS Light
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2007
SimpCMS Light Arbitrary File Inclusion Vulnerability
The SimpCMS Light script is vulnerable to an arbitrary file inclusion vulnerability. The bug file 'index.php' contains the vulnerable code on line 31, where it includes the file specified by the 'site' parameter. An attacker can exploit this vulnerability by supplying a malicious script as the 'site' parameter, leading to arbitrary file inclusion.
Mitigation:
To mitigate this vulnerability, it is recommended to apply a patch or upgrade to a newer version of the SimpCMS Light script. Additionally, input validation and sanitization should be implemented to prevent arbitrary file inclusion attacks.
