CVE-2024-9275CWE-73

jeanmarc77 123solar admin_invt2.php file inclusion

Medium · published September 27, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
37.8
In the wild
Unconfirmed
What it is

A vulnerability was found in jeanmarc77 123solar up to 1.8.4.5. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin_invt2.php. The manipulation of the argument PROTOCOLx leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00446 · 37.8th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2024-09-27T10:31Z
EPSS history
Timeline
  • 27 SEP 10:31Z
    jeanmarc77 123solar admin_invt2.php file inclusion
    cvelistv5