CVE-2007-5186
CVE-2007-5186
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute was retracted after additional analysis.
Affected products
n/a · n/apublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4476unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://secunia.com/advisories/27025https://exchange.xforce.ibmcloud.com/vulnerabilities/36903http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=543854https://www.exploit-db.com/exploits/4476http://www.attrition.org/pipermail/vim/2007-October/001811.htmlhttp://www.attrition.org/pipermail/vim/2007-October/001816.htmlhttp://www.securityfocus.com/bid/25889http://www.vupen.com/english/advisories/2007/3342