Описание
PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cart_isp_root parameter.
Ссылки
- PatchVendor Advisory
- PatchURL Repurposed
- Exploit
- Exploit
- PatchVendor Advisory
- PatchURL Repurposed
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:lighthouse_development:squirrelcart:1.5.5:*:*:*:*:*:*:*
cpe:2.3:a:lighthouse_development:squirrelcart:1.6:*:*:*:*:*:*:*
cpe:2.3:a:lighthouse_development:squirrelcart:2.2.2:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.11099
Средний
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cart_isp_root parameter.
EPSS
Процентиль: 93%
0.11099
Средний
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other