Описание
Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*
cpe:2.3:a:jetbox:jetbox_cms:2.1_sr1:*:*:*:*:*:*:*
EPSS
Процентиль: 75%
0.00911
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.
EPSS
Процентиль: 75%
0.00911
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other