Описание
PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the include_path variable, which is not initialized before being used.
Ссылки
- ExploitVendor Advisory
- Vendor Advisory
- Vendor Advisory
- Exploit
- ExploitVendor Advisory
- Vendor Advisory
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:intensive_point:iuser_ecommerce:*:*:*:*:*:*:*:*
EPSS
Процентиль: 83%
0.01921
Низкий
7.5 High
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
почти 4 года назад
PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the include_path variable, which is not initialized before being used.
EPSS
Процентиль: 83%
0.01921
Низкий
7.5 High
CVSS2
Дефекты
CWE-94