Vulnerabilities > CVE-2007-2202 - Remote File Include vulnerability in Acvsws PHP5 1.0

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
acvsws
exploit available
NVD
Published: 2007-04-24
Updated: 2018-10-16

Summary

PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web Services (ACVSWS) PHP5 (ACVSWS_PHP5) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CheminInclude parameter.

Vulnerable Configurations

Part Description Count
Application
Acvsws
1

Exploit-Db

descriptionACVSWS Transport.PHP Remote File Include Vulnerability. CVE-2007-2202. Webapps exploit for php platform
idEDB-ID:29883
last seen2016-02-03
modified2007-04-23
published2007-04-23
reporterMoHaNdKo
sourcehttps://www.exploit-db.com/download/29883/
titleACVSWS Transport.PHP Remote File Include Vulnerability

References