Remote file inclusion

2011-10-0910:55:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.057 Low

EPSS

Percentile

93.4%

JSON

PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party

CPENameOperatorVersion
clearbudgeteq0.9.8

CPE	Name	Operator	Version
	clearbudget	eq	0.9.8

References

attrition.org/pipermail/vim/2010-August/002388.html

www.securityfocus.com/bid/42351

www.exploit-db.com/exploits/14614