CVE-2006-2315

Опубликовано: 12 мая 2006

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the go_info[server][classes_root] parameter. NOTE: the vendor has disputed this vulnerability, saying that session.inc.php is not under the web root in version 2.2, and register_globals is not enabled

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ispconfig:ispconfig:*:*:*:*:*:*:*:*

Версия до 2.2.2 (включая)

EPSS

Процентиль: 94%

0.13402

Средний

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-j629-vw9x-r3c2

github

почти 4 года назад

** DISPUTED ** PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the go_info[server][classes_root] parameter. NOTE: the vendor has disputed this vulnerability, saying that session.inc.php is not under the web root in version 2.2, and register_globals is not enabled.