Remote file inclusion

2007-10-1210:17:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

JSON

PHP remote file inclusion vulnerability in index.php in PicoFlat CMS 0.4.14 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pagina parameter.

CPENameOperatorVersion
picoflat_cmsle0.4.14

CPE	Name	Operator	Version
	picoflat_cms	le	0.4.14

References

osvdb.org/37686

secunia.com/advisories/27208

www.securityfocus.com/bid/26043

www.exploit-db.com/exploits/4520