Vulnerabilities > CVE-2007-2939 - Unspecified vulnerability in Mazens PHP Chat Mazens PHP Chat 3.0.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN mazens-php-chat
exploit available
Summary
Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to (1) ITX.php, (2) IT_Error.php, or (3) IT.php in include/pear/.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Mazens PHP Chat V3 (basepath) Remote File Inclusion Vulnerabilities. CVE-2007-2939. Webapps exploit for php platform |
| file | exploits/php/webapps/3994.txt |
| id | EDB-ID:3994 |
| last seen | 2016-01-31 |
| modified | 2007-05-26 |
| platform | php |
| port | |
| published | 2007-05-26 |
| reporter | ThE TiGeR |
| source | https://www.exploit-db.com/download/3994/ |
| title | Mazens PHP Chat V3 basepath - Remote File Inclusion Vulnerabilities |
| type | webapps |
References
- http://osvdb.org/38086
- http://osvdb.org/38086
- http://osvdb.org/38087
- http://osvdb.org/38087
- http://osvdb.org/38088
- http://osvdb.org/38088
- http://www.securityfocus.com/bid/24171
- http://www.securityfocus.com/bid/24171
- http://www.vupen.com/english/advisories/2007/1968
- http://www.vupen.com/english/advisories/2007/1968
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34536
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34536
- https://www.exploit-db.com/exploits/3994
- https://www.exploit-db.com/exploits/3994