exploitDog

CVE-2006-5762

Опубликовано: 06 нояб. 2006

Источник: nvd

CVSS2: 5.1

EPSS Средний

Описание

PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. This also affects Free Image Hosting 2.0, which contains the same code.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:free_php_scripts:free_file_hosting:*:*:*:*:*:*:*:*

Версия до 1.1 (включая)

cpe:2.3:a:free_php_scripts:free_image_hosting:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12548

Средний

5.1 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-w4w5-8883-pgqr

github

почти 4 года назад

PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. This also affects Free Image Hosting 2.0, which contains the same code.

EPSS

Процентиль: 94%

0.12548

Средний

5.1 Medium

CVSS2

Дефекты

CWE-94