PT-2008-1796 · Spacial Audio Solutions · Samphpweb
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
samPHPweb versions possibly 4.2.2 and others
Description
The issue allows remote attackers to execute arbitrary PHP code via a URL in the
commonpath parameter in the common/db.php file, as provided with SAM Broadcaster.Recommendations
For samPHPweb version 4.2.2, consider restricting access to the common/db.php file until a patch is available.
For other affected versions of samPHPweb, avoid using the
commonpath parameter in the common/db.php file until the issue is resolved.Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Samphpweb