Vulnerabilities > CVE-2007-3270 - Remote File Include vulnerability in PHPmyinventory 2.8

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
phpmyinventory
critical
exploit available
NVD
Published: 2007-06-19
Updated: 2017-10-11

Summary

PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the strIncludePrefix parameter.

Vulnerable Configurations

Part Description Count
Application
Phpmyinventory
1

Exploit-Db

descriptionphpMyInventory 2.8 (global.inc.php) Remote File Inclusion Vulnerability. CVE-2007-3270. Webapps exploit for php platform
fileexploits/php/webapps/4074.txt
idEDB-ID:4074
last seen2016-01-31
modified2007-06-16
platformphp
port
published2007-06-16
reportero0xxdark0o
sourcehttps://www.exploit-db.com/download/4074/
titlephpMyInventory 2.8 global.inc.php Remote File Inclusion Vulnerability
typewebapps

References