7.6 High
AI Score
Confidence
High
8.5 High
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.012 Low
EPSS
Percentile
85.6%
PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sections_file parameter.
CPE | Name | Operator | Version |
---|---|---|---|
coastal:coast | coastal coast | eq | 0.95 |