CVE-2007-1167

EPSS 3.9%

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3357unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/33372 http://secunia.com/advisories/24260 https://www.exploit-db.com/exploits/3357 http://www.dzcp.de/inc/tinymce_files/Downloads/dzcp_update/notes_1.4.6.txt http://www.securityfocus.com/bid/22660 http://www.vupen.com/english/advisories/2007/0695