CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through <= 1.0.6.
Explanation of Vulnerability in Simple Terms
Majestic Support versions up to 1.0.6 contain a vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, or disrupt service availability. The attack requires specific network conditions but no user interaction. Organizations running affected versions should update immediately to patch this high-severity flaw.
What an attacker can do
Read sensitive data, modify site content, or cause service disruption without authentication.
Potential impact on your site
Unauthorized access to sensitive information, data modification, or service downtime without warning.
Conditions required to exploit
Network access to the affected system; specific attack conditions required.
Key dates
External resources
Related vulnerabilities
