PT-2007-4161 · Abc · Abc Excel Parser Pro
CVE-2007-2857
·
Publicado
2007-05-24
·
Atualizado
2024-02-14
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ABC Excel Parser Pro version 4.0
Description
A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the
parser path parameter.Recommendations
For ABC Excel Parser Pro version 4.0, consider restricting access to the
parser path parameter to minimize the risk of exploitation. Avoid using the parser path parameter with untrusted input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Abc Excel Parser Pro