CVE-2007-6177

EPSS 2.7%

PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the webappcfg[APPPATH] parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4670unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38915 http://secunia.com/advisories/27852 https://exchange.xforce.ibmcloud.com/vulnerabilities/38679 https://www.exploit-db.com/exploits/4670 http://www.securityfocus.com/bid/26622