Unscored CVE-2023-33559 EUVD-2023-37716GHSA-hgjj-3x23-5xv2

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying…

Published Oct 26, 2023 · Updated Sep 10, 2024 · Assigned by mitre

Description

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file.

References

https://github.com/ninj4c0d3r/OcoMon-Research
https://github.com/ninj4c0d3r/OcoMon-Research/commit/7459ff397f48b5356930c16c522331e39158461dv