PT-2007-3531 · Eba News · Eba News
CVE-2007-2190
·
Publicado
2007-04-24
·
Atualizado
2024-02-14
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Eba News version 1.1
Description
A remote file inclusion issue in the admin/public/webpages.php file allows remote attackers to execute arbitrary PHP code via a URL in the
filename parameter.Recommendations
For Eba News version 1.1, avoid using the
filename parameter in the admin/public/webpages.php file until a fix is available. As a temporary workaround, consider restricting access to the admin/public/webpages.php file to minimize the risk of exploitation.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Eba News