Vulnerabilities > CVE-2007-0635 - Unspecified vulnerability in Encapscms 0.3.6

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
encapscms
exploit available
NVD
Published: 2007-01-31
Updated: 2024-11-21

Summary

Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) config[path] parameter to (a) common_foot.php or (b) blogs.php, or (2) the config[theme] parameter to (c) admin/gallery_head.php.

Vulnerable Configurations

Part Description Count
Application
Encapscms
1

Exploit-Db

descriptionEncapsCMS 0.3.6 'common_foot.php' Remote File Include Vulnerability. CVE-2007-0635. Webapps exploit for php platform
idEDB-ID:29539
last seen2016-02-03
modified2007-01-30
published2007-01-30
reporterTr_ZiNDaN
sourcehttps://www.exploit-db.com/download/29539/
titleEncapsCMS 0.3.6 - 'common_foot.php' Remote File Include Vulnerability

References