Описание
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 2.4 (включая)
cpe:2.3:a:pmos_helpdesk:pmos_helpdesk:*:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.06521
Низкий
7.5 High
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
почти 4 года назад
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
EPSS
Процентиль: 91%
0.06521
Низкий
7.5 High
CVSS2
Дефекты
CWE-94