Описание
Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Exploit
- Vendor Advisory
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.6 (включая)
Одно из
cpe:2.3:a:anelectron:advanced_electron_forum:*:*:*:*:*:*:*:*
cpe:2.3:a:anelectron:advanced_electron_forum:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:anelectron:advanced_electron_forum:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:anelectron:advanced_electron_forum:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:anelectron:advanced_electron_forum:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:anelectron:advanced_electron_forum:1.0.5:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.14269
Средний
10 Critical
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
больше 3 лет назад
Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.
EPSS
Процентиль: 94%
0.14269
Средний
10 Critical
CVSS2
Дефекты
CWE-94