Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qp86-p4j4-f3p8

Опубликовано: 06 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting a vulnerable php code because the themes can be modified by an administrator.

SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting a vulnerable php code because the themes can be modified by an administrator.

EPSS

Процентиль: 92%
0.08052
Низкий

7.2 High

CVSS3

Дефекты

CWE-732
CWE-94

Связанные уязвимости

CVSS3: 7.2
nvd
почти 4 года назад

SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting a vulnerable php code because the themes can be modified by an administrator. NOTE: the vendor's position is that administrators are intended to have the ability to modify themes, and can thus choose any PHP code that they wish to have executed on the server.

EPSS

Процентиль: 92%
0.08052
Низкий

7.2 High

CVSS3

Дефекты

CWE-732
CWE-94