Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 11:59 a.m.5 views

CVE-2025-22145

Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload files with .php extension in an folder that allows include or require to read it, then they are a...

6.3CVSS7.2AI score0.00696EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-22145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if...

6.3CVSS5.9AI score0.00696EPSS
Exploits0References2
NVD
NVD
added 2025/01/08 9:15 p.m.4 views

CVE-2025-22145

Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload files with .php extension in an folder that allows include or require to read it, then they are a...

6.3CVSS0.00696EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/01/08 8:40 p.m.10 views

CVE-2025-22145 Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale

Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload files with .php extension in an folder that allows include or require to read it, then they are a...

6.3CVSS0.00696EPSS
Exploits0References2
OSV
OSV
added 2025/01/08 8:40 p.m.4 views

CVE-2025-22145 Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale

Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload files with .php extension in an folder that allows include or require to read it, then they are a...

6.3CVSS7.2AI score0.00696EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/01/08 8:40 p.m.5 views

CVE-2025-22145

Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload files with .php extension in an folder that allows include or require to read it, then they are a...

6.3CVSS5.8AI score0.00696EPSS
Exploits0
Rows per page
Query Builder