Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-23r2-7v4m-m7mp

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php.

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php.

EPSS

Процентиль: 89%
0.0465
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
около 17 лет назад

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitrary PHP code via the message parameter in an HTML webform, which is written to data.php.

EPSS

Процентиль: 89%
0.0465
Низкий

Дефекты

CWE-94