PT-2007-3891 · Noah · Noah
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
NoAh (aka PHP Content Architect, phparch) versions 0.9 through 1.2 and earlier
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
tpls[1] parameter in the modules/noevents/templates/mfa theme.php file.Recommendations
For NoAh (aka PHP Content Architect, phparch) versions 0.9 through 1.2 and earlier, update to a version newer than 1.2 to resolve the issue.
Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Noah