CVE-2007-2097
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End CMS 0.4.7 allow remote attackers to execute arbitrary PHP code v…
Published 19 y ago · modified 4 mo ago · JSON
Summary
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End CMS 0.4.7 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter to (1) click.php or (2) pollcollector.php in htdocs/; or (3) index.php, (4) articlepages.php, (5) articles.php, (6) articleform.php, (7) articlesections.php, (8) createArticlesPage.php, (9) guestbook.php, (10) helpguide.php, (11) helpguideeditor.php, (12) links.php, (13) upload.php, (14) sitestatistics.php, (15) nav.php, (16) tpl_upload.php, (17) linksections, or (18) pophelp.php in htdocs/site-admin/; different vectors than CVE-2006-5076. NOTE: this issue is disputed by a third party, who states that $includes_path is defined before use
Exploit prediction (EPSS)
1.55% probability of exploitation in the next 30 days, higher than 75% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- securityfocus.com /archive/1/465734/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- attrition.org /pipermail/vim/2007-April/001528.html · mailing-list, x_refsource_VIM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/33668 · vdb-entry, x_refsource_XF, x_transferred
- securityreason.com /securityalert/2573 · third-party-advisory, x_refsource_SREASON, x_transferred
- osvdb.org /34148 · vdb-entry, x_refsource_OSVDB, x_transferred
Sources
- CVE List: CVE-2007-2097
- NVD: CVE-2007-2097
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.