PT-2007-6958 · Swsoft · Confixx Professional
Published
2007-11-20
·
Updated
2008-09-05
·
CVE-2007-6042
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SWSoft Confixx Professional version 3.2.1
Description
A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in an unspecified parameter in the fehler.inc.php file.
Recommendations
For SWSoft Confixx Professional version 3.2.1, consider restricting access to the fehler.inc.php file until a patch is available. Avoid using unspecified parameters in URLs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Confixx Professional