CVE-2007-1809
- State
- Published
- Severity
- Not scored
- Published
- Apr 2, 2007
- Updated
- Aug 7, 2024
- Reserved
- Apr 2, 2007
Description
Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_PATH parameter to (1) cls_headline_prod.php, (2) cls_listorders.php, or (3) cls_viewpastorders.php in include/, different vectors than CVE-2007-1513.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 35228vdb-entry
- cwb-includepath-file-include(33351)vdb-entry
- 20070402 [true] CWB pro 1.5 INCLUDE_PATH RFImailing-list
- 23242vdb-entry
- 35226vdb-entry
- 3628exploit
- 35227vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.