CVE-2012-6046 in PHP Enter

Sumário

de MITRE

Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 26/11/2012
• Divulgação: 26/11/2012
• Moderação: aceite
• Entrada: VDB-63067
• CPE: pronto
• CWE: CWE-94 (confirmado)
• Exploração: Descarregar
• CVSS: 10.0 (NVD)
• EPSS: 0.04131
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Telecommunication, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-6046
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-6046
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-6046/