Vulnerabilities > CVE-2007-1060 - Unspecified vulnerability in Interspire Sendstudio

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
interspire
exploit available
NVD
Published: 2007-02-22
Updated: 2024-11-21

Summary

Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals and allow_fopenurl are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOTDIR parameter to (1) createemails.inc.php and (2) send_emails.inc.php in /admin/includes/.

Vulnerable Configurations

Part Description Count
Application
Interspire
1

Exploit-Db

descriptionSendStudio <= 2004.14 (ROOTDIR) Remote File Inclusion Vulnerability. CVE-2007-1060. Webapps exploit for php platform
fileexploits/php/webapps/3348.txt
idEDB-ID:3348
last seen2016-01-31
modified2007-02-20
platformphp
port
published2007-02-20
reporterK-159
sourcehttps://www.exploit-db.com/download/3348/
titleSendStudio <= 2004.14 ROOTDIR Remote File Inclusion Vulnerability
typewebapps

References