Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4mcv-wp5q-9793

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

EPSS

Процентиль: 84%
0.02281
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
почти 17 лет назад

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

EPSS

Процентиль: 84%
0.02281
Низкий

Дефекты

CWE-94