CVE-2010-3742 - Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307

Back Back to CVE browser

HIGH

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307

Published Oct 5, 2010

7.5

HIGH

CVSS 2.0

EPSS 2.53%

Description

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (5)

http://packetstormsecurity.org/1008-exploits/freesimplesoftware-rfi.txt
x_refsource_MISCExploit
http://secunia.com/advisories/41001
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/14672/
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/67239
vdb-entryx_refsource_OSVDB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-3721
Advisory

Link	Providers	Tags
http://packetstormsecurity.org/1008-exploits/freesimplesoftware-rfi.txt		x_refsource_MISCExploit
http://secunia.com/advisories/41001		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/14672/		exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/67239		vdb-entryx_refsource_OSVDB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-3721		Advisory