CVE-2008-1760

Опубликовано: 12 апр. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include.

Ссылки

http://secunia.com/advisories/29684
Vendor Advisory
http://www.blogator-script.com/changelog.php
URL Repurposed
http://www.securityfocus.com/bid/28627
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41660
https://www.exploit-db.com/exploits/5365
http://secunia.com/advisories/29684
Vendor Advisory
http://www.blogator-script.com/changelog.php
URL Repurposed
http://www.securityfocus.com/bid/28627
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41660
https://www.exploit-db.com/exploits/5365

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:blogator-script:blogator-script:*:*:*:*:*:*:*:*

Версия до 1.00 (включая)

cpe:2.3:a:blogator-script:blogator-script:0.90:*:*:*:*:*:*:*

cpe:2.3:a:blogator-script:blogator-script:0.91:*:*:*:*:*:*:*

cpe:2.3:a:blogator-script:blogator-script:0.92:*:*:*:*:*:*:*

cpe:2.3:a:blogator-script:blogator-script:0.93:*:*:*:*:*:*:*

cpe:2.3:a:blogator-script:blogator-script:0.95:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05207

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-qvrx-x8ww-hxgw

github

почти 4 года назад