CVE-2009-1781

Опубликовано: 22 мая 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpre_config.php via the form_aula parameter.

Ссылки

http://www.securityfocus.com/bid/34909
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/1287
Permissions Required
https://www.exploit-db.com/exploits/8658
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/34909
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/1287
Permissions Required
https://www.exploit-db.com/exploits/8658
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:frax:php_recommend:*:*:*:*:*:*:*:*

Версия до 1.3 (включая)

EPSS

Процентиль: 87%

0.03321

Низкий

7.5 High

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-crr6-vw9f-h28h

github

почти 4 года назад