PT-2018-11238

CVE-2018-12531

·

Published

2018-06-18

·

Updated

2018-08-13

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MetInfo version 6.0.0
Description An issue was discovered that allows remote attackers to write arbitrary PHP code into config db.php.
Recommendations For MetInfo version 6.0.0, update to a newer version that contains a fix for this issue, as the current version allows remote attackers to write arbitrary PHP code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2018-12531
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com