Описание
Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sb-websoft:addressbook:1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.03011
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file.
EPSS
Процентиль: 86%
0.03011
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other