PHPMyVisites.File.Inclusion

description-logoDescription

phpMyVisites allows attackers to include arbitrary files. While it has been demonstrated that local files may be included through this vulnerability, there is an unconfirmed possibility of remote file inclusion.

affected-products-logoAffected Products

The issue is known to affect phpMyVisites 1.3. Other versions may also be affected.

Impact logoImpact

Exploitation could disclose local files or, in the case of remote file inclusion, let the attacker execute malicious PHP code.

recomended-action-logoRecommended Actions

The vendor has addressed this version in the CVS development version. An official release containing fixes is pending.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)