PT-2007-1463 · Unknown · Cmsmelborp
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CMSmelborp Beta
Description
A remote file inclusion issue in the includes/user standard.php file allows remote attackers to execute arbitrary PHP code via a URL in the
relative root parameter.Recommendations
For CMSmelborp Beta, consider restricting access to the
includes/user standard.php file until a patch is available. As a temporary workaround, avoid using the relative root parameter in the affected file to minimize the risk of exploitation.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cmsmelborp