Описание
Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:dayfox_designs:dayfox_blog:4:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04892
Низкий
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.
EPSS
Процентиль: 89%
0.04892
Низкий
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other