Описание
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
Ссылки
- Broken Link
- Broken LinkThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Broken Link
- Broken LinkThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cgiscript:csnews_professional:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.32204
Средний
7.5 High
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
больше 4 лет назад
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
EPSS
Процентиль: 98%
0.32204
Средний
7.5 High
CVSS2
Дефекты
CWE-94