PT-2010-5538
CVE-2010-4558
·
تاريخ النشر
2010-12-17
·
تاريخ التحديث
2010-12-20
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
phpMyFAQ versions 2.6.11 through 2.6.12
Description
The issue allows remote attackers to execute arbitrary PHP code due to an externally introduced modification in the getTopTen method in inc/Faq.php.
Recommendations
For versions 2.6.11 and 2.6.12, consider removing or replacing the modified getTopTen method in inc/Faq.php to prevent the execution of arbitrary PHP code.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾