CVE-2007-1486

Publicada em 16 mar 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.9%

PHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook before 1.7.3 allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to admin.php, probably due to a dynamic variable evaluation vulnerability.

Produtos afetados

n/a · n/a

Referências

http://carbonize.co.uk/Lazarus/Forum/index.php?topic=1164.0 http://securityreason.com/securityalert/2432 http://www.attrition.org/pipermail/vim/2007-March/001417.html http://www.securityfocus.com/archive/1/462183/100/100/threaded http://www.securityfocus.com/archive/1/462235/100/100/threaded http://www.securityfocus.com/archive/1/463041/100/0/threaded http://www.securityfocus.com/archive/1/469218/100/0/threaded http://www.vupen.com/english/advisories/2007/0874