PT-2006-5673
CVE-2006-4921
·
تاريخ النشر
2006-09-21
·
تاريخ التحديث
2016-10-18
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Site@School versions 2.4.03 and earlier
Description
A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the
cmsdir parameter to "starnet/modules/include/include.php".Recommendations
For versions 2.4.03 and earlier, consider restricting access to the
include.php file in the starnet/modules/include directory until a fix is available. Avoid using the cmsdir parameter in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾