Описание
PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to "yes", allows remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter.
Ссылки
- Vendor Advisory
- URL Repurposed
- Vendor Advisory
- URL Repurposed
Уязвимые конфигурации
Конфигурация 1Версия до 1.3 (включая)
Одно из
cpe:2.3:a:telekorn:signkorn_guestbook:*:*:*:*:*:*:*:*
cpe:2.3:a:telekorn:signkorn_guestbook:1.1:*:*:*:*:*:*:*
cpe:2.3:a:telekorn:signkorn_guestbook:1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.07406
Низкий
5.1 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to "yes", allows remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter.
EPSS
Процентиль: 91%
0.07406
Низкий
5.1 Medium
CVSS2
Дефекты
NVD-CWE-Other