CVE-2007-0828

EPSS 3.1%

PHP remote file inclusion vulnerability in affichearticles.php3 in MySQLNewsEngine allows remote attackers to execute arbitrary PHP code via a URL in the newsenginedir parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/29569unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/33678 http://securityreason.com/securityalert/2229 https://exchange.xforce.ibmcloud.com/vulnerabilities/32266 http://www.securityfocus.com/archive/1/459290/100/0/threaded http://www.securityfocus.com/bid/22431 http://www.vupen.com/english/advisories/2007/0513