CVE-2007-1118

EPSS 3.2%

Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path_to_smf parameter to (1) bridges/SMF/logout.php or (2) get_session_vars.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3361unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/33526 http://osvdb.org/33527 http://secunia.com/advisories/24268 https://exchange.xforce.ibmcloud.com/vulnerabilities/32662 https://www.exploit-db.com/exploits/3361 http://www.securityfocus.com/bid/22682 http://www.vupen.com/english/advisories/2007/0708