PT-2007-3891 · Noah · Noah

Kezzap66345 · Published 2007-05-09 · Updated 2017-10-11 · CVE-2007-2572

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NoAh (aka PHP Content Architect, phparch) versions 0.9 through 1.2 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the tpls[1] parameter in the modules/noevents/templates/mfa theme.php file.

Recommendations For NoAh (aka PHP Content Architect, phparch) versions 0.9 through 1.2 and earlier, update to a version newer than 1.2 to resolve the issue.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-2572

Affected Products

Noah

References · 5

• 🔥 https://exploit-db.com/exploits/3861 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2572 · Security Note
• http://osvdb.org/37656 · Note
• http://vupen.com/english/advisories/2007/1676 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34103 · Note