PT-2007-2208 · Php · Phpprobid

Publicado 2007-02-06 · Atualizado 2017-07-29 · CVE-2007-0758

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPProbid version 5.24

Description A remote file inclusion issue exists in the lang.php file of PHPProbid, allowing remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the SRC attribute of an HTML element within the lang parameter.

Recommendations For PHPProbid version 5.24, consider restricting access to the lang.php file to prevent remote file inclusion attacks. As a temporary workaround, avoid using the lang parameter in URLs until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-0758

Produtos afetados

Phpprobid

Referências · 6

• 🔥 https://exploit-db.com/exploits/29560 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0758 · Nota
• http://osvdb.org/34667 · Nota
• http://securityfocus.com/bid/22374 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32273 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0758 · Nota de Segurança