Design/Logic Flaw

2015-05-2517:59:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.5%

JSON

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request, as exploited in the wild in May 2015.