CVE-2015-9227

PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators…

published September 11, 2017

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators to execute arbitrary PHP code via a URL in the file_path parameter to upload/admin2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02463 · 84.2th percentile
Published
2017-09-11T20:00Z
EPSS history
Timeline
  • 11 SEP 20:00Z
    PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators…
    cvelistv5