Vulnerabilities > CVE-2007-0489 - Remote File Include vulnerability in VisoHotlink Functions.Visohotlink.PHP

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
visohotlink
exploit available
NVD
Published: 2007-01-25
Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in includes/functions.visohotlink.php in VisoHotlink 1.01 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Vulnerable Configurations

Part Description Count
Application
Visohotlink
1

Exploit-Db

descriptionVisoHotlink 1.01 functions.visohotlink.php Remote File Include Exploit. CVE-2007-0489. Webapps exploit for php platform
fileexploits/php/webapps/3175.pl
idEDB-ID:3175
last seen2016-01-31
modified2007-01-22
platformphp
port
published2007-01-22
reporterbd0rk
sourcehttps://www.exploit-db.com/download/3175/
titleVisoHotlink 1.01 functions.visohotlink.php Remote File Include Exploit
typewebapps

References