Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5vpf-j7g9-25wc

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting code into an Apache log file.

Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting code into an Apache log file.

EPSS

Процентиль: 89%
0.05029
Низкий

Дефекты

CWE-22

Связанные уязвимости

nvd
больше 18 лет назад

Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting code into an Apache log file.

EPSS

Процентиль: 89%
0.05029
Низкий

Дефекты

CWE-22