PT-2001-2369 · Phormation · Phormation Php Script
CVE-2001-1237
·
Publicado
2001-10-02
·
Atualizado
2008-09-10
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Phormation PHP script versions 0.9.1 and earlier
Description
The issue allows remote attackers to execute arbitrary code by including files from remote web sites. This is achieved by using an HTTP request that modifies the
phormationdir variable.Recommendations
For Phormation PHP script versions 0.9.1 and earlier, consider restricting access to the
phormationdir variable to prevent modification via HTTP requests until a patch is available.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Phormation Php Script