exploitDog

CVE-2018-18626

Опубликовано: 23 окт. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 6.4

EPSS Низкий

Описание

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because del_action() in admin/model/database.class.php mishandles this parameter.

Ссылки

http://str3am.me/2018/10/23/CVE_01/#more
Broken Link
Third Party Advisory
URL Repurposed
http://str3am.me/2018/10/23/CVE_01/#more
Broken Link
Third Party Advisory
URL Repurposed

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpyun:phpyun:4.6:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00237

Низкий

7.5 High

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-p665-f3mv-m9pp

CVSS3: 7.5

github

больше 3 лет назад

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because del_action() in admin/model/database.class.php mishandles this parameter.

EPSS

Процентиль: 46%

0.00237

Низкий

7.5 High

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo