Vulnerabilities > CVE-2007-1017 - Remote File Include vulnerability in VS-News-System Show_News_Inc.PHP

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
virtualsystem
critical
exploit available
NVD
Published: 2007-02-21
Updated: 2017-10-11

Summary

PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. Successful exploitation requires that "register_globals" is enabled.

Vulnerable Configurations

Part Description Count
Application
Virtualsystem
1

Exploit-Db

descriptionVS-News-System <= 1.2.1 (newsordner) Remote File Include Exploit. CVE-2007-1017. Webapps exploit for php platform
fileexploits/php/webapps/3322.html
idEDB-ID:3322
last seen2016-01-31
modified2007-02-16
platformphp
port
published2007-02-16
reporterajann
sourcehttps://www.exploit-db.com/download/3322/
titleVS-News-System <= 1.2.1 newsordner Remote File Include Exploit
typewebapps

References