Описание
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this is a vulnerability in FCKeditor.
Ссылки
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1Версия до 0.9.2.1 (включая)
Одно из
cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*
cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.1146
Средний
5.1 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this is a vulnerability in FCKeditor.
EPSS
Процентиль: 93%
0.1146
Средний
5.1 Medium
CVSS2
Дефекты
NVD-CWE-Other