Free File Hosting Forgot_Pass.PHP Remote File Include Vulnerability

Free File Hosting is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

Free File Hosting 1.1 and prior versions are vulnerable.


 

Privacy Statement
Copyright 2010, SecurityFocus