PT-2007-4285 · Inout · Inout Meta Search Engine

Blackhawk · Published 2007-06-01 · Updated 2018-10-16 · CVE-2007-2988

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Inout Meta Search Engine (affected versions not specified)

Description: The issue concerns a certain admin script in the software that fails to exit when administrative credentials are missing. This allows remote attackers to inject arbitrary PHP code. The exploitation can be demonstrated by sending a request to "admin/create engine.php" followed by a request to "admin/generate tabs.php".

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-2988

Affected Products

Inout Meta Search Engine

References · 8

• 🔥 https://exploit-db.com/exploits/4004 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2988 · Security Note
• http://osvdb.org/42034 · Note
• http://securityfocus.com/archive/1/469808/100/0/threaded · Note
• http://securityfocus.com/bid/24189 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34563 · Note
• http://securityfocus.com/bid/24199 · Note
• http://securityreason.com/securityalert/2763 · Note