Intrusion PreventionModernbill.Config.PHP.Remote.File.Inclusion
Description
It indicates a possible exploit of a remote file inclusion vulnerability in config.php, in Modernbill, that may allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter.
Affected Products
ModernBill ModernBill 1.6
Impact
Compromise of affected system.
Recommended Actions
Currently we are not aware of any exploits for this issue.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2018-09-27 | 13.459 |
Removed
|
| ID | 14020 |
| Created | Feb 06, 2007 |
| Updated | Apr 23, 2014 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 1.5% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |
| Profile Type | Code Injection |