Описание
PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Broken Link
- Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Broken Link
- Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:allmyguests_project:allmyguests:0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:allmyguests_project:allmyguests:0.3:*:*:*:*:*:*:*
cpe:2.3:a:allmyguests_project:allmyguests:0.4:*:*:*:*:*:*:*
cpe:2.3:a:allmyguests_project:allmyguests:0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:allmylinks_project:allmylinks:0.3:*:*:*:*:*:*:*
cpe:2.3:a:allmylinks_project:allmylinks:0.4:*:*:*:*:*:*:*
cpe:2.3:a:allmylinks_project:allmylinks:0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:allmylinks_project:allmylinks:0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:allmylinks_project:allmylinks:0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:allmylinks_project:allmylinks:0.4.9:*:*:*:*:*:*:*
cpe:2.3:a:allmylinks_project:allmylinks:0.5:*:*:*:*:*:*:*
cpe:2.3:a:allmyvisitors_project:allmyvisitors:0.3:*:*:*:*:*:*:*
cpe:2.3:a:allmyvisitors_project:allmyvisitors:0.4:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.29934
Средний
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-829
Связанные уязвимости
CVSS3: 9.8
github
почти 4 года назад
PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.
EPSS
Процентиль: 97%
0.29934
Средний
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-829