Nessus Plugin #16100

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

QWikiwiki directory traversal vulnerability

Family:

CGI abuses

Category:

attack

Copyright:

This script is Copyright (C) 2005 Noam Rathaus

Summary:

Checks for the presence of a File Inclusion Vulnerability

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

12163

Xrefs:

-

Description:

The remote host is running QWikiwiki, a Wiki application written in PHP.

The remote version of this software contains a validation input flaw
which may allow an attacker to use it to read arbitrary files on the
remote host with the privileges of the web server.


Solution : Upgrade to the newest version of this software
Risk factor: High