CVE-2007-2185

State: Published
Severity: Not scored
Published: Apr 24, 2007
Updated: Aug 7, 2024
Reserved: Apr 24, 2007

Description

Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supa[db_path] parameter to (1) common_functions.php, (2) admin_auth_cookies.php, (3) admin_mods.php, (4) admin_news.php, (5) admin_topics.php, (6) admin_users.php, (7) admin_utilities.php, (8) site_comment.php, or (9) site_news.php; or the supa[include_path] parameter to (10) admin_settings.php or (11) backend_site.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

supasite-supa-file-include(33796)vdb-entry
38845vdb-entry
38849vdb-entry
38846vdb-entry
38851vdb-entry
38855vdb-entry
38854vdb-entry
38853vdb-entry
23581vdb-entry
3771exploit
38847vdb-entry
38848vdb-entry
ADV-2007-1492vdb-entry
38850vdb-entry
38852vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.