Описание
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) init.php and (2) Ajax/editnews.php. NOTE: some of these details are obtained from third party information.
Ссылки
- ExploitVendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:softnews_media_group:datalife_engine:4.1:*:*:*:*:*:*:*
cpe:2.3:a:softnews_media_group:datalife_engine:5.5:*:*:*:*:*:*:*
EPSS
Процентиль: 84%
0.02238
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) init.php and (2) Ajax/editnews.php. NOTE: some of these details are obtained from third party information.
EPSS
Процентиль: 84%
0.02238
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other