Описание
PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:php_system_administration_toolkit:php_system_administration_toolkit:*:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.01596
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
** DISPUTED ** PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used.
EPSS
Процентиль: 74%
0.01596
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other