RCE in Dynpg
CVE-2010-1299
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) DefineRootToTool parameter to counter.php, (2) PathToRoot parameter to plugins/DPGguestbook/guestbookaction.php and (3) get_popUpResource parameter to backendpopup/popup.php. NOTE: some of these details are obtained from third party information.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.107 (95.4th percentile) — read the EPSS interpretation.
Affected products
- Dynpg
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Exploit, exploit, Third Party Advisory, VDB Entry, x_refsource_EXPLOIT-DB)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory, VDB Entry)
- cve@mitre.org (Exploit, Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- cve@mitre.org (VDB Entry, vdb-entry, x_refsource_XF)
- cve@mitre.org (VDB Entry, vdb-entry, x_refsource_XF)