Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r8pf-p598-jhpm

Опубликовано: 20 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized.

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized.

EPSS

Процентиль: 87%
0.03455
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 2 лет назад

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized.

CVSS3: 9.8
nvd
больше 2 лет назад

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized.

CVSS3: 9.8
debian
больше 2 лет назад

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untr ...

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость функции unserialize() веб-инструмента администрирования СУБД PostgreSQL phpPgAdmin, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 87%
0.03455
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502