CVE-2007-2260

State: Published
Severity: Not scored
Published: Apr 25, 2007
Updated: Aug 7, 2024
Reserved: Apr 25, 2007

Description

Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

35628vdb-entry
35624vdb-entry
35631vdb-entry
35633vdb-entry
35629vdb-entry
35622vdb-entry
35621vdb-entry
20070422 bibtex mase Remote File Inclusionmailing-list
35625vdb-entry
35623vdb-entry
35632vdb-entry
2624third-party-advisory
35626vdb-entry
35630vdb-entry
35627vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.