PT-2009-2230
CVE-2008-6761
·
تاريخ النشر
2009-04-28
·
تاريخ التحديث
2017-09-29
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Flexcustomer version 0.0.6
Description:
A static code injection issue exists, potentially allowing remote attackers to inject arbitrary PHP code into const.inc.php via the
installdbname parameter, also known as the Database Name field.Recommendations:
For Flexcustomer version 0.0.6, as a temporary workaround, consider restricting access to the admin/install.php file until the issue is resolved. To fully resolve the issue, follow the installation instructions and delete the admin/install.php file after installation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾