Lucene search
HistoryDec 19, 2014 - 3:59 p.m.
CVE-2014-9185
cve-2014-9185
static code injection
morfy cms
remote code execution
php
vulnerability
nvd
6.9 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.9%
Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the site_url parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| morfy_cms_project:morfy_cms | morfy cms project morfy cms | le | 1.04 |
Related
prion
prion
Code injection
2014-12-19 15:59:00
vulnerlab
vulnerlab
Morfy CMS v1.05 - Command Execution Vulnerability
2014-12-10 00:00:00
Morfy CMS v1.05 - Command Execution Vulnerability
2014-12-10 00:00:00
cvelist
cvelist
CVE-2014-9185
2014-12-19 15:00:00
packetstorm
packetstorm
Morfy CMS 1.05 Remote Command Execution
2014-12-17 00:00:00
securityvulns
securityvulns
Morfy CMS v1.05 - Command Execution Vulnerability
2014-12-22 00:00:00
6.9 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.9%
Related for CVE-2014-9185