Sitellite · Sitellite Cms · CVE-2007-3228
Name of the Vulnerable Software and Affected Versions:
Sitellite CMS versions 4.2.12 and earlier
Description:
A remote file inclusion issue might allow remote attackers to execute arbitrary PHP code via a URL in the `FORUM[LIB]` parameter. By default, access to the PhpDocumentor directory tree is blocked by .htaccess.
Recommendations:
For Sitellite CMS versions 4.2.12 and earlier, as a temporary workaround, consider restricting access to the PhpDocumentor directory tree to minimize the risk of exploitation. Avoid using the `FORUM[LIB]` parameter in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.