CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through <= 1.0.7.
Explanation of Vulnerability in Simple Terms
Majestic Support versions 1.0.7 and earlier contain a vulnerability that allows authenticated users with low privileges to read sensitive data, modify site content, or disrupt service availability. The vulnerability requires network access and high attack complexity, but no user interaction. Affected installations should update immediately.
What an attacker can do
Read sensitive data, modify site content, or disrupt service availability on the affected system.
Potential impact on your site
An authenticated user with low privileges can compromise confidentiality, integrity, and availability of the Majestic Support installation.
Conditions required to exploit
Attacker must have low-level authenticated access to the application and network connectivity.
Key dates
External resources
Related vulnerabilities
