Remote file inclusion

2007-03-0319:19:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.085 Low

EPSS

Percentile

94.5%

JSON

PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the stwc_counter_verzeichniss parameter.

CPENameOperatorVersion
stwc-countereq2.2.7
stwc-countereq2.6.3
stwc-countereq2.7.0
stwc-countereq2.6.1
stwc-countereq2.6.4
stwc-countereq2.1.0
stwc-countereq2.7.1
stwc-countereq1.21
stwc-countereq2.5.1
stwc-countereq2.8.0

Name	Operator	Version
stwc-counter	eq	2.2.7
stwc-counter	eq	2.6.3
stwc-counter	eq	2.7.0
stwc-counter	eq	2.6.1
stwc-counter	eq	2.6.4
stwc-counter	eq	2.1.0
stwc-counter	eq	2.7.1
stwc-counter	eq	1.21
stwc-counter	eq	2.5.1
stwc-counter	eq	2.8.0