PT-2007-5364 · Php · Vgallite

Publicado 2007-08-07 · Atualizado 2024-08-07 · CVE-2007-4169

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions vgallite (affected versions not specified)

Description Multiple PHP remote file inclusion issues in vgallite may allow remote attackers to execute arbitrary PHP code. The issue is reportedly related to the dirpath parameter to functions.php and the lang parameter to index.php. However, the validity of these vectors is disputed due to the nature of the include once statements and the variables involved.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-4169

Produtos afetados

Vgallite

Referências · 6

• https://t.me/cvenotify/89692 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35819 · Nota
• http://securityfocus.com/archive/1/475643/100/0/threaded · Nota
• http://securityreason.com/securityalert/2963 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4169 · Nota de Segurança
• http://osvdb.org/46803 · Nota