Описание
Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) program_files/livedraft/livedraft.php or (2) program_files/livedraft/admin.php.
Ссылки
- Patch
- Exploit
- Patch
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpffl:phpffl:1.24:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.21748
Средний
4.6 Medium
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
больше 4 лет назад
Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) program_files/livedraft/livedraft.php or (2) program_files/livedraft/admin.php.
EPSS
Процентиль: 98%
0.21748
Средний
4.6 Medium
CVSS2
Дефекты
CWE-94