Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP c…

Published 19 y ago 2007-03-31 · modified 4 mo ago 2026-06-16 · JSON

CVSS

6.8

v2.0 · NVD

CISA KEV

not known exploited

EPSS

7.2%

percentile 94%

Public exploits

Exploit-DB

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP code via a URL in the install_root parameter to (1) support.inc.php, (2) function.inc.php, (3) rdal_object.inc.php, (4) rdal_editor.inc.php. (5) login.inc.php, (6) request.inc.php, and (7) categories.inc.php in include/core/; (8) save.inc.php, (9) preview.inc.php, (10) edit_item.inc.php, (11) new_item.inc.php, and (12) item_info.inc.php in include/display/item/; (13) search.inc.php, (14) item_edit.inc.php, (15) register_succsess.inc.php, (16) context_menu.inc.php, (17) item_repost.inc.php, (18) balance.inc.php, (19) featured.inc.php, (20) user.inc.php, (21) buynow.inc.php, (22) install_complete.inc.php, (23) fees_info.inc.php, (24) user_feedback.inc.php, (25) admin_balance.inc.php, (26) activate.inc.php, (27) user_info.inc.php, (28) member.inc.php, (29) add_bid.inc.php, (30) items_filter.inc.php, (31) my_info.inc.php, (32) register.inc.php, (33) leave_feedback.inc.php, and (34) user_auctions.inc.php in include/display/; and (35) design/form.inc.php, (36) processor.inc.php, (37) interfaces.inc.php (38) left_menu.inc.php, (39) login.inc.php, and (40) categories.inc.php in include/.

Exploit prediction (EPSS)

7.16% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

EDB-3607 Kaqoo Auction - 'install_root' Multiple Remote File Inclusions · webapps · 2007-03-29

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	6.8	`AV:N/AC:M/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-94 Improper Control of Generation of Code

References

osvdb.org /34582 · vdb-entry, x_refsource_OSVDB, x_transferred
vupen.com /english/advisories/2007/1180 · vdb-entry, x_refsource_VUPEN, x_transferred
osvdb.org /34551 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34548 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34558 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34572 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34578 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34553 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34573 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34584 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34564 · vdb-entry, x_refsource_OSVDB, x_transferred
exploit-db.com /exploits/3607 · exploit, x_refsource_EXPLOIT-DB, x_transferred
osvdb.org /34556 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34575 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34568 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34554 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34563 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34571 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34570 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34560 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34557 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34583 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34547 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34552 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34545 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34561 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34581 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34580 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34567 · vdb-entry, x_refsource_OSVDB, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/33335 · vdb-entry, x_refsource_XF, x_transferred
osvdb.org /34579 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34569 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34559 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34576 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34550 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34577 · vdb-entry, x_refsource_OSVDB, x_transferred
secunia.com /advisories/24696 · third-party-advisory, x_refsource_SECUNIA, x_transferred
osvdb.org /34549 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34566 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34574 · vdb-entry, x_refsource_OSVDB, x_transferred
osvdb.org /34546
osvdb.org /34555
osvdb.org /34562
osvdb.org /34565

Sources

CVE List: CVE-2007-1790
NVD: CVE-2007-1790

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.