PT-2007-2866 · Groupit · Groupit

Dedi Dwianto + 1 · Published 2007-03-16 · Updated 2018-10-16 · CVE-2007-1472

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Groupit version 2.00b5

Description The issue allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via arguments that are written to $ GLOBALS. This can be achieved by manipulating the c basepath parameter in various PHP files, including "content.php", "userprofile.php", "password.php", "dispatch.php", and "deliver.php" in the html/ directory, and possibly "load.inc.php" and related files.

Recommendations For Groupit version 2.00b5, consider restricting access to the vulnerable PHP files until a patch is available. As a temporary workaround, avoid using the c basepath parameter in the affected API endpoints, such as "content.php", "userprofile.php", "password.php", "dispatch.php", and "deliver.php", to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-1472

Affected Products

Groupit

References · 10

• 🔥 http://attrition.org/pipermail/vim/2007-March/001435.html · Exploit
• 🔥 https://exploit-db.com/exploits/3486 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1472 · Security Note
• http://securityreason.com/securityalert/2428 · Note
• http://osvdb.org/34476 · Note
• http://attrition.org/pipermail/vim/2007-March/001436.html · Note
• http://securityfocus.com/archive/1/462918/100/0/threaded · Note
• http://advisories.echo.or.id/adv/adv75-theday-2007.txt · Note
• http://vupen.com/english/advisories/2007/0995 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33000 · Note