Vulnerability Details CVE-2010-3742
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://packetstormsecurity.org/1008-exploits/freesimplesoftware-rfi.txt
- http://secunia.com/advisories/41001
- http://www.exploit-db.com/exploits/14672/
- http://www.osvdb.org/67239
- http://packetstormsecurity.org/1008-exploits/freesimplesoftware-rfi.txt
- http://secunia.com/advisories/41001
- http://www.exploit-db.com/exploits/14672/
- http://www.osvdb.org/67239
Products affected by CVE-2010-3742
-
cpe:2.3:a:dustincowell:free_simple_cms:1.0