CVE-2004-0128

Опубликовано: 03 мар. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.

Ссылки

http://secunia.com/advisories/10753/
http://sourceforge.net/project/shownotes.php?release_id=141517
Vendor Advisory
http://www.osvdb.org/3769
http://www.securityfocus.com/archive/1/352355
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9531
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14987
http://secunia.com/advisories/10753/
http://sourceforge.net/project/shownotes.php?release_id=141517
Vendor Advisory
http://www.osvdb.org/3769
http://www.securityfocus.com/archive/1/352355
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9531
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14987

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.09543

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-jj37-9mh4-pcf6

github

почти 4 года назад