Point Maker Includes Remote File Inclusion Vulnerability

CVE-2024-49317

7.5HIGH

Key Information

Vendor: Zipang
Status: Point Maker
Vendor: CVE Published:; 17 October 2024

Summary

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ZIPANG Point Maker allows PHP Local File Inclusion.This issue affects Point Maker: from n/a through 0.1.4.

Affected Version(s)

Point Maker <= 0.1.4

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Oct 17, 2024
Vulnerability Reserved.
Oct 14, 2024

Collectors

NVD DatabaseMitre Database

Credit

theviper17 (Patchstack Alliance)