PT-2007-2557 · Sinapis · Sinapis Gastebuch

Kezzap66345 · Published 2007-02-27 · Updated 2017-10-11 · CVE-2007-1130

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sinapis Gastebuch version 2.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter in the sinagb.php file.

Recommendations For Sinapis Gastebuch version 2.2, consider restricting access to the sinagb.php file or the fuss parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-1130

Affected Products

Sinapis Gastebuch

References · 6

• 🔥 https://exploit-db.com/exploits/3366 · Exploit
• 🔥 http://securityfocus.com/bid/22696 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1130 · Security Note
• http://vupen.com/english/advisories/2007/0737 · Note
• http://osvdb.org/37007 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32657 · Note