CVE-2007-6179

EPSS 7.8%

Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the ccms_library_path parameter to (1) markdown.php and (2) gallery.php in decoder/.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4672unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38912 http://osvdb.org/38913 http://secunia.com/advisories/27854 https://exchange.xforce.ibmcloud.com/vulnerabilities/38678 https://www.exploit-db.com/exploits/4672 http://www.securityfocus.com/bid/26619