Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crrr-c9vf-88c2

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

** DISPUTED ** PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use.

** DISPUTED ** PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use.

EPSS

Процентиль: 77%
0.01019
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
почти 19 лет назад

PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use

EPSS

Процентиль: 77%
0.01019
Низкий

Дефекты

CWE-94