Test ID:	1.3.6.1.4.1.25623.1.0.802934
Category:	Web application abuses
Title:	Cyclope Employee Surveillance Solution 6.x - 6.0.2 LFI Vulnerability - Active Check
Summary:	Cyclope Employee Surveillance Solution is prone to local file; inclusion (LFI) vulnerability.
Description:	Summary: Cyclope Employee Surveillance Solution is prone to local file inclusion (LFI) vulnerability. Vulnerability Insight: An improper validation of user-supplied input via the 'pag' parameter to 'help.php', that allows remote attackers to view files and execute local scripts in the context of the webserver. Vulnerability Impact: Successful exploitation will allow attacker to obtain potentially sensitive information. Affected Software/OS: Cyclope Employee Surveillance Solution version 6.0 through 6.0.2. Solution: Update to version 6.2.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.