5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.093 Low
EPSS
Percentile
94.7%
PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[ppa_root_path] parameter.
CPE | Name | Operator | Version |
---|---|---|---|
skrypty:ppa_gallery | skrypty ppa gallery | le | 1.0 |
skrypty:ppa_gallery | skrypty ppa gallery | eq | 0.5.6 |