This host is running Textpattern and is prone to remote file inclusion vulnerability.

Successful exploitation will allow attacker to execute arbitrary code on the vulnerable Web server. Impact Level: Application.

Upgrade to version 4.3.0 or later, For updates refer to http://textpattern.com/download

The flaw is due to an error in 'index.php', which is not properly sanitizing user-supplied data via 'inc' parameter. This allows an attacker to include arbitrary files.

Textpattern CMS version 4.2.0

• http://packetstormsecurity.org/1008-exploits/textpattern-rfi.txt
• http://www.exploit-db.com/exploits/14823/
• http://xforce.iss.net/xforce/xfdb/61475

---

Updated on 2015-03-25