← back
CVE-2007-4231

CVE-2007-4231

EPSS 3.6%
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svr_rootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4267unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://advisories.echo.or.id/adv/adv83-K-159-2007.txthttp://secunia.com/advisories/26356https://exchange.xforce.ibmcloud.com/vulnerabilities/35834https://www.exploit-db.com/exploits/4267http://www.osvdb.org/36296http://www.securityfocus.com/bid/25221http://www.vupen.com/english/advisories/2007/2811