Test ID:	1.3.6.1.4.1.25623.1.0.103761
Category:	Web application abuses
Title:	ZeroShell 2.0RC2 File Disclosure / Command Execution
Summary:	ZeroShell is prone to a local file-include vulnerability because it; fails to sufficiently sanitize user-supplied input.
Description:	Summary: ZeroShell is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Vulnerability Insight: Input to the 'Object' value in /cgi-bin/kerbynet is not properly sanitized. Vulnerability Impact: An attacker can exploit this vulnerability to view files or execute arbitrary script code in the context of the web server process. This may aid in further attacks. Affected Software/OS: ZeroShell version 2.0RC2 is vulnerable. Other versions may also be affected. Solution: Updates are available. Please see the references for more information. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.