Vulnerabilities > CVE-2007-1416 - Remote File Include vulnerability in Jccorp Urlshrink 1.3.1

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
jccorp
critical
exploit available
NVD
Published: 2007-03-12
Updated: 2018-10-16

Summary

PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers to execute arbitrary PHP code via a URL in the formurl parameter.

Vulnerable Configurations

Part Description Count
Application
Jccorp
1

Exploit-Db

descriptionJCCorp URLShrink Free 1.3.1 CreateURL.PHP Remote File Include Vulnerability. CVE-2007-1416. Webapps exploit for php platform
idEDB-ID:29722
last seen2016-02-03
modified2007-03-09
published2007-03-09
reporterHasadya Raed
sourcehttps://www.exploit-db.com/download/29722/
titleJCCorp URLShrink Free 1.3.1 CreateURL.PHP Remote File Include Vulnerability

References