CVE-2008-3368

Опубликовано: 30 июл. 2008

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:atutor:atutor:*:pl1:*:*:*:*:*:*

Версия до 1.6.1 (включая)

cpe:2.3:a:atutor:atutor:0.9.6:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:0.9.7:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.0:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.4:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.5.5:*:*:*:*:*:*:*

cpe:2.3:a:atutor:atutor:1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04707

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-2w89-g5fw-9c76

github

почти 4 года назад