CVE-2004-2602

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCL_path parameter to pipe.php.

Ссылки

http://secunia.com/advisories/13652
Vendor Advisory
http://securitytracker.com/id?1012685
Exploit
http://www.gulftech.org/?node=research&article_id=00058-12242004
Exploit
http://www.osvdb.org/12598
Exploit
http://www.securityfocus.com/bid/12105
Exploit
http://www.ubertec.co.uk/forums/showthread/php?t=2376
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18694
http://secunia.com/advisories/13652
Vendor Advisory
http://securitytracker.com/id?1012685
Exploit
http://www.gulftech.org/?node=research&article_id=00058-12242004
Exploit
http://www.osvdb.org/12598
Exploit
http://www.securityfocus.com/bid/12105
Exploit
http://www.ubertec.co.uk/forums/showthread/php?t=2376
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18694

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ubertec:help_center_live:1.1:*:*:*:*:*:*:*

cpe:2.3:a:ubertec:help_center_live:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ubertec:help_center_live:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ubertec:help_center_live:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ubertec:help_center_live:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ubertec:help_center_live:1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ubertec:help_center_live:1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ubertec:help_center_live:1.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01764

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8w9h-6c6m-8g5q

github

почти 4 года назад