Vulnerabilities > CVE-2007-4235 - Unspecified vulnerability in Vietphp
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN vietphp
exploit available
Summary
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a URL in (1) the dirpath parameter to (a) _functions.php, or (2) the language parameter to (b) admin/index.php or (c) index.php.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description VietPHP admin/index.php language Parameter Remote File Inclusion. CVE-2007-4235. Webapps exploit for php platform id EDB-ID:30457 last seen 2016-02-03 modified 2007-08-07 published 2007-08-07 reporter master-of-desastor source https://www.exploit-db.com/download/30457/ title VietPHP admin/index.php language Parameter Remote File Inclusion description VietPHP index.php language Parameter Remote File Inclusion. CVE-2007-4235. Webapps exploit for php platform id EDB-ID:30459 last seen 2016-02-03 modified 2007-08-07 published 2007-08-07 reporter master-of-desastor source https://www.exploit-db.com/download/30459/ title VietPHP index.php language Parameter Remote File Inclusion description VietPHP _functions.php dirpath Parameter Remote File Inclusion. CVE-2007-4235. Webapps exploit for php platform id EDB-ID:30456 last seen 2016-02-03 modified 2007-08-07 published 2007-08-07 reporter master-of-desastor source https://www.exploit-db.com/download/30456/ title VietPHP _functions.php dirpath Parameter Remote File Inclusion
References
- http://securityreason.com/securityalert/2983
- http://securityreason.com/securityalert/2983
- http://www.securityfocus.com/archive/1/475758/100/0/threaded
- http://www.securityfocus.com/archive/1/475758/100/0/threaded
- http://www.securityfocus.com/bid/25226
- http://www.securityfocus.com/bid/25226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35846
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35846