Unscored CVE-2011-5136 EUVD-2011-5036GHSA-cmc3-76m8-f9wh

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.

Published Aug 30, 2012 · Updated Aug 7, 2024 · Assigned by mitre

Description

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.

References

20111206 Backdoor in EPractize Labs Online Subscription Manager from epractizelabs.com mailing-list
epractice-showimg-code-exec(71630) vdb-entry
77505 vdb-entry
47072 third-party-advisory