Lucene search
HistoryJun 10, 2024 - 4:15 p.m.
CVE-2024-35650
cve-2024-35650
improper control of filename
include/require statement
php program
'php remote file inclusion'
melapress melapress
login security
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Improper Control of Filename for Include/Require Statement in PHP Program (‘PHP Remote File Inclusion’) vulnerability in Melapress MelaPress Login Security allows PHP Remote File Inclusion.This issue affects MelaPress Login Security: from n/a through 1.3.0.
Affected configurations
Node
melapressmelapress_login_securityRange<1.3.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| melapress | melapress_login_security | * | cpe:2.3:a:melapress:melapress_login_security:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
vulnrichment
vulnrichment
wpvulndb
wpvulndb
cve
cve
CVE-2024-35650
2024-06-10 16:15:15
wordfence
wordfence
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.3%
Related for NVD:CVE-2024-35650