CVE-2007-6231

EPSS 3.4%

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tm_includepath parameter to (1) Classes.inc.php, (2) statistic.inc.php, (3) status.inc.php, (4) status_top_x.inc.php, or (5) libchart-1.1/libchart.php in include/. NOTE: access to include/ is blocked by .htaccess in most deployments that use Apache HTTP Server.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4684unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/39689 http://osvdb.org/39692 http://secunia.com/advisories/27895 https://exchange.xforce.ibmcloud.com/vulnerabilities/38801 https://www.exploit-db.com/exploits/4684 http://www.attrition.org/pipermail/vim/2007-December/001854.html http://www.securityfocus.com/bid/26678