exploitDog

CVE-2008-0300

Опубликовано: 11 мар. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mapbender:mapbender:2.4:*:*:*:*:*:*:*

cpe:2.3:a:mapbender:mapbender:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:mapbender:mapbender:2.4.2:*:*:*:*:*:*:*

cpe:2.3:a:mapbender:mapbender:2.4.3:*:*:*:*:*:*:*

cpe:2.3:a:mapbender:mapbender:2.4.4:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04272

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-5f2r-j5h2-8p7f

github

почти 4 года назад

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

EPSS

Процентиль: 89%

0.04272

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-94