CVE-2007-4485

State: Published
Severity: Not scored
Published: Aug 22, 2007
Updated: Aug 7, 2024
Reserved: Aug 22, 2007

Description

PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Butterfly online visitors counter.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://securityvulns.com/Rdocument845.html
20070821 Vulnerabilities digestmailing-list
20071010 Vulnerabilities digestmailing-list
butterfly-visitor-file-include(36147)vdb-entry
http://securityvulns.com/source26994.html
38327vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.