Project.Pier.patch.PHP.id.Parameter.Remote.File.Inclusion

Description

This indicates an attack attempt against an Remote File Inclusion vulnerability in Project Pier.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker can include arbitrary files and execute it within the context of the application.

Affected Products

ProjectPier 0.8.8

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.

References