Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6x8v-g32x-9hw3

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.

edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.

EPSS

Процентиль: 76%
0.01014
Низкий

Связанные уязвимости

nvd
около 24 лет назад

edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.

EPSS

Процентиль: 76%
0.01014
Низкий