|
Family: CGI abuses --> Category: infos
sglMerchant Information Disclosure Vulnerability Vulnerability Scan
Vulnerability Scan Summary sglMerchant Information Disclosure Vulnerability
Detailed Explanation for this Vulnerability Test
A CGI (view_item) that is a part of sglMerchant is installed.
This CGI suffers from a security vulnerability that makes it possible to escape
the bounding HTML root directory and read arbitrary system files.
Solution: Contact the author of the program
Threat Level: High
Additional information:
http://www.securiteam.com/unixfocus/5KP012K5FK.html
Click HERE for more information and discussions on this network vulnerability scan.
|