CVE-2015-2945
h-fj mt-phpincgi: no CVSS score yet. EPSS 1.7% chance of exploitation in the next 30 days.
mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request, as exploited in the wild in May 2015.
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-11-01)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced