PT-2024-39361 · 123Solar · 123Solar
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
jeanmarc77 123solar version 1.8.4.5
Description:
A critical issue exists in the software, affecting an unknown part of the file config/config invt1.php. The manipulation of the
PASSOx argument leads to code injection. This issue can be exploited remotely.Recommendations:
To fix this issue, apply the patch identified as f4a8c748ec436e5a79f91ccb6a6f73752b336aa5. As a temporary workaround, consider restricting access to the file config/config invt1.php and avoiding the manipulation of the
PASSOx argument until the patch is applied.Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
123Solar