iSupport v1.8 Local file include vulnerability

2007-12-27 / 2007-12-28

Credit: ahcrew

Risk: High

Local: No

Remote: Yes

CVE: CVE-2007-6539

CWE: CWE-94

CVSS Base Score: 6.8/10

Impact Subscore: 6.4/10

Exploitability Subscore: 8.6/10

Exploit range: Remote

Attack complexity: Medium

Authentication: No required

Confidentiality impact: Partial

Integrity impact: Partial

Availability impact: Partial

iSupport v1.8 Local file Inclusion Vuln (found by JuMp-Er (http://www.ahc-security.org))

Script Name : iSupport

version : 1.8

Vendor Site : http://www.idevspot.com/iSupport.php

Exploit : http://www.site.com/iSupport/index.php?include_file=[local file]

<3 StRoNiX, mawena, ML`, n0th1ng

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

iSupport v1.8 Local file include vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.