Описание
DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
Ссылки
- ExploitVendor Advisory
- Patch
- ExploitVendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*
cpe:2.3:a:dcscripts:dcforum_2000:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.06988
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
EPSS
Процентиль: 91%
0.06988
Низкий
10 Critical
CVSS2
Дефекты
NVD-CWE-Other