vendor:
Virtual Law Office (VLO)
by:
xoron
8,8
CVSS
HIGH
Remote File Include
98
CWE
Product Name: Virtual Law Office (VLO)
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
Virtual Law Office (phpc_root_path) Remote File Include Vulnerability
A vulnerability in Virtual Law Office (VLO) allows remote attackers to execute arbitrary code by including a malicious file via the phpc_root_path parameter in a URL.
Mitigation:
Upgrade to the latest version of Virtual Law Office (VLO) or apply the appropriate patch.
