CVE-2015-4726

AudioShare 2.0.2 - Remote File Inclusion via config['basedir'] Parameter

Title source: llm

Description

PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config['basedir'] parameter.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/75382

Exploit x_refsource_misc

http://packetstormsecurity.com/files/132337/Audio-Share-2.0.2-Cross-Site-Scripting-Remote-File-Inclusion.html

Scores

EPSS 0.0150

EPSS Percentile 71.0%

Details

CWE

CWE-94

Status published

Products (1)

audiosharescript/audioshare 2.0.2

Published Jun 23, 2015

Tracked Since Feb 18, 2026