CVE-2010-4884

2011-10-0710:00:00

mitre

www.cve.org

7.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.7%

JSON

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter.

References

packetstormsecurity.org/1008-exploits/hinnendahlgb-rfi.txt

securityreason.com/securityalert/8436

www.exploit-db.com/exploits/14810