CVE-2007-3217
- State
- Published
- Severity
- Not scored
- Published
- Jun 14, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jun 14, 2007
Description
Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the path_inc parameter to (1) index.php in gestion/; (2) identification.php, (3) disconnect.php, (4) loginliste.php, (5) loginmodif.php, (6) index.php, and (7) ident.inc.php in ident/; (8) menuadministration.php and (9) menuprincipal.php in menu/; (10) param.inc.php in param/; (11) index.php in plugins/phpgacl/; and (12) index.php and (13) common.inc.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 37158vdb-entry
- 2812third-party-advisory
- 37155vdb-entry
- 37161vdb-entry
- 20070601 Prototype of an PHP application ===> RFImailing-list
- 24266vdb-entry
- prototypephp-pathinc-file-include(34679)vdb-entry
- 37160vdb-entry
- 37153vdb-entry
- 37151vdb-entry
- 37159vdb-entry
- 37156vdb-entry
- 37157vdb-entry
- 37152vdb-entry
- 37150vdb-entry
- 37154vdb-entry
- 37149vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.