Lucene search

K
prionPRIOn knowledge basePRION:CVE-2010-2145
HistoryJun 03, 2010 - 2:30 p.m.

Remote file inclusion

2010-06-0314:30:00
PRIOn knowledge base
www.prio-n.com
4

7.9 High

AI Score

Confidence

Low

0.043 Low

EPSS

Percentile

92.3%

Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute arbitrary PHP code via a URL in the cs_base_path parameter to (1) docs.php and (2) include/admin/device_admin.php. NOTE: the header.php vector is already covered by CVE-2009-3306. NOTE: this issue may be due to a variable extraction error.

CPENameOperatorVersion
clearsiteeq4.50 beta

7.9 High

AI Score

Confidence

Low

0.043 Low

EPSS

Percentile

92.3%