Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the class_path parameter to (1) file.php or (2) com_del.php.
References
Link | Resource |
---|---|
http://www.exploit-db.com/exploits/14618 | Exploit |
Configurations
Information
Published : 2011-10-09 03:55
Updated : 2012-05-13 21:00
NVD link : CVE-2010-4943
Mitre link : CVE-2010-4943
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
brothersoft
- saurus_cms