Описание
PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.
PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2007-4279
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35873
- https://www.exploit-db.com/exploits/4269
- http://arfis.wordpress.com/2007/09/14/rfi-02-frontaccounting
- http://osvdb.org/36431
- http://secunia.com/advisories/26350
- http://www.securityfocus.com/bid/25229
- http://www.vupen.com/english/advisories/2007/2809
EPSS
Процентиль: 99%
0.85424
Высокий
CVE ID
Связанные уязвимости
nvd
больше 18 лет назад
PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.
EPSS
Процентиль: 99%
0.85424
Высокий