Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjp9-35c3-rjjh

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.

Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.

EPSS

Процентиль: 92%
0.08916
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
больше 20 лет назад

Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Referer header of an HTTP request, which causes the code to be injected into referer.php, which can then be accessed by the attacker.

EPSS

Процентиль: 92%
0.08916
Низкий

Дефекты

CWE-94