Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-23938

Опубликовано: 22 янв. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Image Gallery Box by CRUDLab allows PHP Local File Inclusion. This issue affects Image Gallery Box by CRUDLab: from n/a through 1.0.3.

EPSS

Процентиль: 47%
0.00242
Низкий

7.5 High

CVSS3

Дефекты

CWE-98

Связанные уязвимости

CVSS3: 7.5
github
около 1 года назад

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Image Gallery Box by CRUDLab allows PHP Local File Inclusion. This issue affects Image Gallery Box by CRUDLab: from n/a through 1.0.3.

EPSS

Процентиль: 47%
0.00242
Низкий

7.5 High

CVSS3

Дефекты

CWE-98