CVE-2007-4807

EPSS 3.2%

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to (1) modules/Discipline/CategoryBreakdownTime.php or (2) modules/Discipline/StudentFieldBreakdown.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4377unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/26775 https://exchange.xforce.ibmcloud.com/vulnerabilities/36523 https://www.exploit-db.com/exploits/4377 http://www.osvdb.org/36997 http://www.osvdb.org/36998 http://www.securityfocus.com/bid/25603 http://www.vupen.com/english/advisories/2007/3133