Описание
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
Ссылки
- US Government Resource
- US Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:2.5:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:3.0:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:4.0:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:4.3:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 69%
0.00588
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
EPSS
Процентиль: 69%
0.00588
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other