CVE-2007-6082

EPSS 3.6%

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4635unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/3388 https://exchange.xforce.ibmcloud.com/vulnerabilities/38543 https://www.exploit-db.com/exploits/4635 http://www.r57.li/exploit.txt http://www.securityfocus.com/archive/1/483867/100/0/threaded http://www.securityfocus.com/bid/26481