PT-2007-1655 · Allmylinks · Allmylinks

Gold_M · Published 2007-01-11 · Updated 2024-04-23 · CVE-2007-0171

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AllMyLinks versions 0.5.0 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the AML opensite parameter in the index.php file. This enables attackers to potentially gain control over the system by injecting malicious PHP code.

Recommendations For AllMyLinks versions 0.5.0 and earlier, consider disabling the AML opensite parameter in the index.php file until a patch is available to prevent remote file inclusion attacks. Restrict access to the index.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-0171

Affected Products

Allmylinks

References · 6

• 🔥 http://securityfocus.com/bid/21916 · Exploit
• 🔥 https://exploit-db.com/exploits/3096 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0171 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31314 · Note
• http://osvdb.org/35909 · Note
• https://t.me/cvenotify/77816 · Telegram Post