CVE-2009-1779

Опубликовано: 22 мая 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the form_include_template parameter.

Ссылки

http://www.securityfocus.com/bid/34909
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/1287
Permissions Required
https://www.exploit-db.com/exploits/8658
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/34909
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/1287
Permissions Required
https://www.exploit-db.com/exploits/8658
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*

Версия до 1.3 (включая)

EPSS

Процентиль: 87%

0.0332

Низкий

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-xj9r-6r7r-x7p5

github

почти 4 года назад