Detections
Analytics
CGI Generic Local File Inclusion
medium Nessus Plugin ID 42056
Language:
Synopsis
Confidential data may be disclosed on this server.Description
The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a local file and disclose its content.Solution
Restrict access to the vulnerable application. Contact the vendor for a patch or upgrade.See Also
Plugin Details
Severity: Medium
ID: 42056
File Name: torture_cgi_local_file_inclusion.nasl
Version: 1.17
Type: remote
Family: CGI abuses
Published: 10/7/2009
Updated: 4/7/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Vulnerability Information
Required KB Items: Settings/enable_web_app_tests