Описание
Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:vscripts:vnews:1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03395
Низкий
9 Critical
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php.
EPSS
Процентиль: 88%
0.03395
Низкий
9 Critical
CVSS2
Дефекты
NVD-CWE-Other