Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j5wc-cpcc-m6m6

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.

EPSS

Процентиль: 69%
0.0059
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attackers to include arbitrary local and remote files via the language parameter and a terminating null ("%00") characters.

EPSS

Процентиль: 69%
0.0059
Низкий