Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r2rh-4fmj-hpq7

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php.

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php.

EPSS

Процентиль: 82%
0.0183
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
около 17 лет назад

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] parameter to admin/index.php.

debian
около 17 лет назад

Dynamic variable evaluation vulnerability in lists/admin.php in phpLis ...

EPSS

Процентиль: 82%
0.0183
Низкий

Дефекты

CWE-94