Gwolle Guestbook: possible remote file inclusion using abspath


Description   Using a specific parameter, a malicious user might be able to include a remote PHP file on the server, and therefore execute code.
     
Default
configuration
 
Profiles High Medium Low Internet
Action Block Block Block Block
Alarm Level Major Minor Minor Minor
     
References   URL: http://seclists.org/bugtraq/2014/Nov/103
     
Available since   ASQ v5.0.0
     
Protects   Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
100 last CVE   CVE-2015-8354
CVE-2015-8353
CVE-2015-8351
CVE-2015-8350



 
 
 
 
 Risk level 
Low