Описание
Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 4.1.3 (включая)
cpe:2.3:a:qualiteam:x-cart:*:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.05721
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter.
EPSS
Процентиль: 90%
0.05721
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other