PT-2012-6091
CVE-2012-5777
·
تاريخ النشر
2012-11-16
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
EmpireCMS version 6.6
Description
The issue concerns an eval injection vulnerability in the ReplaceListVars function within the template parser, located in e/class/connect.php. This vulnerability allows user-assisted remote attackers to execute arbitrary PHP code by crafting a malicious template.
Recommendations
For EmpireCMS version 6.6, consider disabling the ReplaceListVars function in the template parser until a patch is available to prevent the execution of arbitrary PHP code. Restrict access to the template parser to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾