CVE-2013-4557

Опубликовано: 18 нояб. 2013

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

The Security Screen (core/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:spip:spip:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.8:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.9:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.10:*:*:*:*:*:*:*

cpe:2.3:a:spip:spip:3.0.11:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.69494

Средний

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2013-4557

ubuntu

около 12 лет назад

The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.

CVE-2013-4557

debian

около 12 лет назад

The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 ...

GHSA-p3c2-jj59-pgg6

github

больше 3 лет назад

The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.

EPSS

Процентиль: 99%

0.69494

Средний

7.5 High

CVSS2

Дефекты

CWE-94