PT-2018-18923
CVE-2018-9238
·
Published
2018-04-04
·
Updated
2018-05-03
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Yahei-PHP Proberv version 0.4.7
Description
The issue is related to a security problem where an attacker can inject malicious code. The
funName parameter in the proberv.php file is vulnerable to this type of attack.Recommendations
For Yahei-PHP Proberv version 0.4.7, avoid using the
funName parameter in the proberv.php file until a fix is available. As a temporary workaround, consider restricting access to the proberv.php file to minimize the risk of exploitation.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾