CVE-2009-4082

Опубликовано: 29 нояб. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:lanifex:outreach_project_tool:*:*:*:*:*:*:*:*

Версия до 1.2.7 (включая)

cpe:2.3:a:lanifex:outreach_project_tool:0.94:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.933:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.934:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.935:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.936:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.937:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.938:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.939:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.941:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.942:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.943:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.944:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.945:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.946:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.947:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:0.948:beta:*:*:*:*:*:*

cpe:2.3:a:lanifex:outreach_project_tool:1.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03241

Низкий

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-793f-cwfr-g87q

github

почти 4 года назад