exploitDog

CVE-2006-1749

Опубликовано: 12 апр. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter. NOTE: this issue was later reported to affect 2.01 as well.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:smartisoft:phplistpro:*:*:*:*:*:*:*:*

Версия до 2.0 (включая)

cpe:2.3:a:smartisoft:phplistpro:2.01:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04902

Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-xjrv-gw67-437v

github

почти 4 года назад

PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter. NOTE: this issue was later reported to affect 2.01 as well.

EPSS

Процентиль: 89%

0.04902

Низкий

7.5 High

CVSS2

Дефекты

CWE-94