Unscored CVE-2018-10759 EUVD-2018-2829GHSA-j4xq-pqf9-r22p

PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbi…

Published May 16, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter.

References

20180513 CVE-2018-10759/CVE-2018-10760: Project Pier 0.8.8 vulnerabilities mailing-list