Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5vg-hj9x-r48m

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch.

lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch.

EPSS

Процентиль: 98%
0.66001
Средний

Дефекты

CWE-94

Связанные уязвимости

nvd
около 11 лет назад

lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace function with the eval switch.

EPSS

Процентиль: 98%
0.66001
Средний

Дефекты

CWE-94