CVE-2015-2945

2015-05-2517:00:00

jpcert

www.cve.org

7.7 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.5%

JSON

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request, as exploited in the wild in May 2015.