exploitDog

CVE-2007-5186

Опубликовано: 03 окт. 2007

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute was retracted after additional analysis.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:segue_cms:segue_cms:*:*:*:*:*:*:*:*

Версия до 1.8.4 (включая)

EPSS

Процентиль: 98%

0.53406

Средний

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-5q2v-rq3q-xc6m

github

почти 4 года назад

PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute was retracted after additional analysis.

EPSS

Процентиль: 98%

0.53406

Средний

6.8 Medium

CVSS2

Дефекты

CWE-94

Уязвимость CVE-2007-5186