Remote file inclusion

2007-08-3100:17:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

PHP remote file inclusion vulnerability in protection.php in ePersonnel RC_2004_02 allows remote attackers to execute arbitrary PHP code via a URL in the logout_page parameter.

CPENameOperatorVersion
epersonneleq0.0.0-rc20042

CPE	Name	Operator	Version
	epersonnel	eq	0.0.0-rc20042

References

osvdb.org/38439

securityreason.com/securityalert/3077

www.securityfocus.com/archive/1/477867/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/36279