CVE-2007-1908

EPSS 3.1%

PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3694unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34720 http://secunia.com/advisories/24818 https://exchange.xforce.ibmcloud.com/vulnerabilities/33525 https://www.exploit-db.com/exploits/3694 http://www.securityfocus.com/bid/23392 http://www.vupen.com/english/advisories/2007/1314