Lucene search

K
cvelistMitreCVELIST:CVE-2010-2145
HistoryJun 03, 2010 - 2:00 p.m.

CVE-2010-2145

2010-06-0314:00:00
mitre
www.cve.org

7.5 High

AI Score

Confidence

Low

0.043 Low

EPSS

Percentile

92.3%

Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute arbitrary PHP code via a URL in the cs_base_path parameter to (1) docs.php and (2) include/admin/device_admin.php. NOTE: the header.php vector is already covered by CVE-2009-3306. NOTE: this issue may be due to a variable extraction error.

7.5 High

AI Score

Confidence

Low

0.043 Low

EPSS

Percentile

92.3%