Описание
The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or an unspecified parameter to (2) PPD/index.php, (3) dirmng/docmd.php, or (4) dirmng/param.php.
Ссылки
- ExploitUS Government Resource
- ExploitUS Government Resource
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:caldera:caldera:9.20:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00419
Низкий
7.5 High
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
больше 3 лет назад
The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or an unspecified parameter to (2) PPD/index.php, (3) dirmng/docmd.php, or (4) dirmng/param.php.
EPSS
Процентиль: 61%
0.00419
Низкий
7.5 High
CVSS2
Дефекты
CWE-94