RCE in Bitscripts Bits Video Script
CVE-2010-0367
Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers to execute arbitrary PHP code via a URL in the rowptem[template] parameter to (1) showcasesearch.php and (2) showcase2search.php.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.023 (81.6th percentile) — read the EPSS interpretation.
Affected products
- Bitscripts Bits_video_script — versions 2.04, 2.05
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)