Описание
PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUM[LIB] parameter. NOTE: by default, access to the PhpDocumentor directory tree is blocked by .htaccess.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:simian_systems_inc:sitellite_cms:4.2.12:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.67463
Средний
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUM[LIB] parameter. NOTE: by default, access to the PhpDocumentor directory tree is blocked by .htaccess.
EPSS
Процентиль: 99%
0.67463
Средний
6.8 Medium
CVSS2
Дефекты
NVD-CWE-Other