PT-2007-3679
CVE-2007-2346
·
تاريخ النشر
2007-04-27
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
PHP-Generics version 1.0 beta
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
APP RELATIVE PATH parameter to specific API endpoints: "include.php", "dbcommon/include.php", and "exception/include.php".Recommendations
For PHP-Generics version 1.0 beta, consider restricting access to the
APP RELATIVE PATH parameter in the affected API endpoints until a patch is available. As a temporary workaround, avoid using the APP RELATIVE PATH parameter in the "include.php", "dbcommon/include.php", and "exception/include.php" endpoints to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾