PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.07132
Percentile: 0.9111

CVSS Scoring

Mapped CWE(s)

• CWE-829 : Inclusion of Functionality from Untrusted Control Sphere

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1055 : Process Injection
  Kill Chain: defense-evasion
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access
• T1505.005 : Terminal Services DLL
  Kill Chain: persistence
• T1574.006 : Dynamic Linker Hijacking
  Kill Chain: persistence
• T1574.013 : KernelCallbackTable
  Kill Chain: persistence
• T1620 : Reflective Code Loading
  Kill Chain: defense-evasion
• T1055 : Process Injection
  Kill Chain: defense-evasion
• T1195.001 : Compromise Software Dependencies and Development Tools
  Kill Chain: initial-access
• T1176 : Software Extensions
  Kill Chain: persistence
• T1505.004 : IIS Components
  Kill Chain: persistence

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*

← Back to Home