• info
• discussion
• exploit
• solution
• references

CCleague Pro PHP Local File Include Vulnerability

CCleague Pro is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to access sensitive information and to execute local script code in the context of the application; this may facilitate other attacks against the affected computer and its users.

Version 1.0.1 RC1 is vulnerable; other versions may also be affected.