CVE-2010-1106

ALTO 7.5CVE-2010-1106 · Published 25/03/2010 · updated 16/06/2026

En resumen

CVE-2010-1106 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a advertisementmanager (advertisementmanager).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.1%, mayor que el 81.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
advertisementmanager advertisementmanager	`= 3.1.0`	No fix yet

Description

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

References

packetstormsecurity.com/1001-exploits/advertisemanager-xssrfitraversal.txt · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/55756

Más vulnerabilidades de advertisementmanager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free