« Volver al listado

CVE-2018-18626

Estado: ModificadaAlta (7.5)—

Se ha descubierto un problema en PHPYun V4.6. Hay una vulnerabilidad que puede eliminar cualquier archivo o directorio mediante el parámetro sql en admin/index.php?m=databasec=del debido a que del_action() en admin/model/database.class.php gestiona de manera incorrecta este parámetro.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Phpyun — Phpyun

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-18626",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": true,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-10-23T19:29:00.230",
  "references": [
    {
      "url": "http://str3am.me/2018/10/23/CVE_01/#more",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "URL Repurposed"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://str3am.me/2018/10/23/CVE_01/#more",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "URL Repurposed"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the \"admin/index.php?m=database&c=del\" sql parameter because del_action() in admin/model/database.class.php mishandles this parameter."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema en PHPYun V4.6. Hay una vulnerabilidad que puede eliminar cualquier archivo o directorio mediante el parámetro sql en admin/index.php?m=databasec=del debido a que del_action() en admin/model/database.class.php gestiona de manera incorrecta este parámetro."
    }
  ],
  "lastModified": "2026-06-17T01:47:36.077",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpyun:phpyun:4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F336726-7561-4C71-8D71-9D7D29138BCA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}