CVE-2007-2816

EPSS 10.1%

Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) test1.php, (2) blackorange.php, (3) default.php, (4) frames1.php, (5) frames1_top.php, (7) test2.php, (8) test3.php, (9) test4.php, (10) test5.php, (11) test6.php, (12) frames1_left.php, and (13) frames1_center.php in themes/.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/3962unverified exploitdbwww.exploit-db.com/exploits/3964unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36493 http://osvdb.org/36494 http://osvdb.org/36495 http://osvdb.org/36496 http://osvdb.org/36497 http://osvdb.org/36498 http://osvdb.org/36499 http://osvdb.org/36500 http://osvdb.org/36501 http://osvdb.org/36502 http://osvdb.org/36503 http://osvdb.org/36504