PT-2007-3252 · Pathos · Pathos Cms

Kezzap66345 · Published 2007-04-10 · Updated 2017-10-11 · CVE-2007-1907

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Pathos Content Management System (CMS) versions 0.92 through 0.92-2

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the file parameter in the warn.php file.

Recommendations: For Pathos Content Management System (CMS) versions 0.92 through 0.92-2, consider restricting access to the warn.php file to minimize the risk of exploitation. Avoid using the file parameter in the warn.php file until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-1907

Affected Products

Pathos Cms

References · 6

• 🔥 https://exploit-db.com/exploits/3696 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1907 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33536 · Note
• http://vupen.com/english/advisories/2007/1321 · Note
• http://osvdb.org/37394 · Note
• http://securityfocus.com/bid/23393 · Note