Vulnerability in Enterprise Payroll Systems
CVE-2006-2983
PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
EPSS: 0.013 (67.2th percentile) — read the EPSS interpretation.
Affected products
- Enterprise_payroll_systems — versions 1.0_alpha, 1.1, 1.01_alpha
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)