PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.01503
Percentile: 0.8034

CVSS Scoring

Affected Products

• cpe:2.3:a:autolinks:autolinks:2.1:*:pro:*:*:*:*:*

← Back to Home