CVE-2007-0850

Publicada em 08 fev 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.7%

scripts/cronscript.php in SysCP 1.2.15 and earlier includes and executes arbitrary PHP scripts that are referenced by the panel_cronscript table in the SysCP database, which allows attackers with database write privileges to execute arbitrary code by constructing a PHP file and adding its filename to this table.

Produtos afetados

n/a · n/a

Referências

http://osvdb.org/33127 http://secunia.com/advisories/24102 https://exchange.xforce.ibmcloud.com/vulnerabilities/32330 http://www.securityfocus.com/archive/1/459397/100/0/threaded http://www.securityfocus.com/bid/22454 http://www.syscp.org/wiki/Security/SyscpOrgAbilityToInjectAndExecuteAnyCodeAsRootInSysCP