• info
• discussion
• exploit
• solution
• references

H-Sphere SiteStudio Template Parameter Local File Include Vulnerability

Solution:
The vendor released a patch to address this issue. Please see the references for more information.


Positive Software H-Sphere SiteStudio 3.0

• Positive Software Version 3.0 Patch 1
  http://www.psoft.net/shiv/HS/releases/U30.0/U30.0P1/U30.0P1

Positive Software H-Sphere SiteStudio 2.5

• Positive Software Version 2.5 Patch 10
  http://www.psoft.net/shiv/HS/releases/U25.0/U25.0P10/U25.0P10