Description
A vulnerability was found in jeanmarc77 123solar up to 1.8.4.5. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin_invt2.php. The manipulation of the argument PROTOCOLx leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jeanmarc77 | 123solar | 1.8.4.0, 1.8.4.1, 1.8.4.2, 1.8.4.3, 1.8.4.4, 1.8.4.5 | — |
References
- VDB-278657 | jeanmarc77 123solar admin_invt2.php file inclusion vdb-entry technical-description
- VDB-278657 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #408326 | 123Solar 1.8.4.5 File Inclusion third-party-advisory
- https://github.com/jeanmarc77/123solar/issues/75 exploit issue-tracking