Описание
Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:phpcms:phpcms:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:phpcms:phpcms:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:phpcms:phpcms:1.2.1_p12:*:*:*:*:*:*:*
cpe:2.3:a:phpcms:phpcms:1.2.1_pl1:*:*:*:*:*:*:*
EPSS
Процентиль: 84%
0.02118
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php.
EPSS
Процентиль: 84%
0.02118
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other