• info
• discussion
• exploit
• solution
• references

H-Sphere SiteStudio Template Parameter Local File Include Vulnerability

H-Sphere SiteStudio is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

H-Sphere SiteStudio 3.0 and prior versions are vulnerable to this issue.