7.5

CVE-2007-4947

Exploit
Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the ptinclude parameter to (1) help1.php, (2) help2.php, (3) help3.php, (4) help4.php, (5) help5.php, (6) help6.php, (7) help7.php, (7) help8.php, (8) help9.php, or (10) index.php in doc/admin/.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Myphppagetool ≫ Myphppagetool Version0.4.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.58% 0.879
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://arfis.wordpress.com/2007/09/14/rfi-03-myphppagetool/
Exploit
http://osvdb.org/43150
http://osvdb.org/43151
http://osvdb.org/43152
http://osvdb.org/43153
http://osvdb.org/43154
http://osvdb.org/43155
http://osvdb.org/43156
http://osvdb.org/43157
http://osvdb.org/43158
http://osvdb.org/43159