Agares Media phpAutoVideo Multiple Remote and Local File Include Vulnerabilities

Agares Media phpAutoVideo Multiple Remote and Local File Include Vulnerabilities

Agares Media phpAutoVideo is prone to multiple remote and local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

Exploiting these issues will allow an attacker to access potentially sensitive information and execute arbitrary scripts or PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.

These issues affect phpAutoVideo 2.21; other versions may also be affected.