CVE-2010-0678

MEDIO 6.8CVE-2010-0678 · Published 22/02/2010 · updated 16/06/2026

En resumen

CVE-2010-0678 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a katalog stron hurricane (katalog.hurricane).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
katalog stron hurricane katalog.hurricane	`= 1.3.5`	No fix yet

Description

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includes_directory parameter.

References

osvdb.org/62340
packetstormsecurity.org/1002-exploits/katalog-rfisql.txt · Exploit
secunia.com/advisories/38581 · Vendor Advisory
exploit-db.com/exploits/11452 · Exploit

Más vulnerabilidades de katalog stron hurricane

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free