CVE-2010-2132

Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1 beta allow remote attackers to execute arbitrary PHP code via a URL in…

published June 2, 2010

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1 beta allow remote attackers to execute arbitrary PHP code via a URL in the CONF_INCLUDE_PATH parameter to (1) forum/admin.php and (2) plotgraph/index.php in admin/modules/modules/, and (3) admin_user/mod_admuser.php and (4) ogroup/mod_group.php in admin/modules/user_account/, different vectors than CVE-2007-1446.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02394 · 83.8th percentile
Published
2010-06-02T18:14Z
EPSS history
Timeline
  • 02 JUN 18:14Z
    Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1 beta allow remote attackers to execute arbitrary PHP code via a URL in…
    cvelistv5