Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-18185

Опубликовано: 02 окт. 2020
Источник: debian
EPSS Низкий

Описание

class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
pluxmlremovedpackage

Примечания

  • https://github.com/pluxml/PluXml/issues/321

  • The attack vector is a little unusual but it would be quite expected that

  • the admin can execute arbitrary php code.

EPSS

Процентиль: 64%
0.00475
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 5 лет назад

class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.

CVSS3: 9.8
nvd
больше 5 лет назад

class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.

github
больше 3 лет назад

class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.

EPSS

Процентиль: 64%
0.00475
Низкий