CVE-2007-3221

published 2007-06-14

CVE-2007-3221: PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary…

Priority P3 50 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

EXPLOIT

PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656.

Detection & IOCs extracted from sources · hover to see the quote

path /modules/xt_conteudo/admin/spaw/spaw_control.class.php↗

path admin/spaw/spaw_control.class.php↗

• → Detect HTTP requests targeting the vulnerable RFI endpoint with a URL-valued spaw_root parameter ↗
• → Flag any GET/POST request to spaw_control.class.php within the xt_conteudo module path as a potential RFI exploitation attempt ↗

• · This CVE is noted as likely a duplicate of CVE-2006-4656, which covers the same spaw_root RFI in the SPAW editor component; detections may already be covered under the earlier CVE ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.