PT-2007-3530
CVE-2007-2189
·
تاريخ النشر
2007-04-24
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
MX Smartor Full Album Pack (FAP) version 2.0 RC1
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
phpbb root path parameter in the admin/admin album otf.php file. This can be exploited by providing a malicious URL.Recommendations
For MX Smartor Full Album Pack (FAP) version 2.0 RC1, consider restricting access to the
admin/admin album otf.php file until a patch is available. Avoid using the phpbb root path parameter in the affected file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾