PT-2010-5538 · Phpmyfaq · Phpmyfaq

Publicado 2010-12-17 · Atualizado 2010-12-20 · CVE-2010-4558

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 2.6.11 through 2.6.12

Description The issue allows remote attackers to execute arbitrary PHP code due to an externally introduced modification in the getTopTen method in inc/Faq.php.

Recommendations For versions 2.6.11 and 2.6.12, consider removing or replacing the modified getTopTen method in inc/Faq.php to prevent the execution of arbitrary PHP code.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2010-4558

Produtos afetados

Phpmyfaq

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-4558 · Nota de Segurança
• http://vupen.com/english/advisories/2010/3254 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4558 · Nota
• http://phpmyfaq.de/advisory_2010-12-15.php · Aviso do Fabricante
• http://securityfocus.com/bid/45442 · Correção
• http://secunia.com/advisories/42622 · Aviso do Fabricante