PHP Remote File Inclusion Vulnerability in Classified Listing

CVE-2024-52386

5.3MEDIUM

Key Information

Vendor: Business Directory Team By Radiustheme
Status: Classified Listing
Vendor: CVE Published:; 16 November 2024

Summary

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Business Directory Team by RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through 3.1.15.1.

Affected Version(s)

Classified Listing <= 3.1.15.1

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Nov 16, 2024
Vulnerability Reserved.
Nov 11, 2024

Collectors

NVD DatabaseMitre Database

Credit

João Pedro Soares de Alcântara - Kinorth (Patchstack Alliance)