CVE-2007-2706

EPSS 3.3%

PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows remote attackers to execute arbitrary PHP code via a URL in the _MG_CONF[path_html] parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3924unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36239 http://secunia.com/advisories/25272 https://exchange.xforce.ibmcloud.com/vulnerabilities/34294 https://www.exploit-db.com/exploits/3924 http://www.securityfocus.com/bid/23983 http://www.vupen.com/english/advisories/2007/1827