Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-12712
HistoryJun 26, 2018 - 7:29 p.m.

Code injection

2018-06-2619:29:00
PRIOn knowledge base
www.prio-n.com
4

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

An issue was discovered in Joomla! 2.5.0 through 3.8.8 before 3.8.9. The autoload code checks classnames to be valid, using the “class_exists” function in PHP. In PHP 5.3, this function validates invalid names as valid, which can result in a Local File Inclusion.

CPENameOperatorVersion
joomla\\!ge2.5.0
joomla\\!le3.8.8

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

Related for PRION:CVE-2018-12712