Описание
Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services.
Ссылки
- Third Party Advisory
- ExploitTechnical Description
- Third Party Advisory
- ExploitTechnical Description
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wcms:wcms:0.3.2:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00304
Низкий
8.3 High
CVSS3
7.5 High
CVSS2
Дефекты
CWE-918
Связанные уязвимости
github
больше 3 лет назад
Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services.
EPSS
Процентиль: 53%
0.00304
Низкий
8.3 High
CVSS3
7.5 High
CVSS2
Дефекты
CWE-918