CVE-2007-4235
published 2007-08-08CVE-2007-4235: Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a URL in (1) the dirpath parameter to…
PriorityP344critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
3.40%
87.3th percentile
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a URL in (1) the dirpath parameter to (a) _functions.php, or (2) the language parameter to (b) admin/index.php or (c) index.php.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
VietPHP - 'index.php?language' Remote File Inclusion
exploitdb·2007-08-07
CVE-2007-4235 VietPHP - 'index.php?language' Remote File Inclusion
VietPHP - 'index.php?language' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/25226/info
VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
http://www.example.com/index.php??language=Sh3LL
Exploit-DB
VietPHP - '_functions.php?dirpath' Remote File Inclusion
exploitdb·2007-08-07
CVE-2007-4235 VietPHP - '_functions.php?dirpath' Remote File Inclusion
VietPHP - '_functions.php?dirpath' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/25226/info
VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
http://www.example.com/_functions.php?dirpath=Sh3LL
Exploit-DB
VietPHP - '/admin/index.php?language' Remote File Inclusion
exploitdb·2007-08-07
CVE-2007-4235 VietPHP - '/admin/index.php?language' Remote File Inclusion
VietPHP - '/admin/index.php?language' Remote File Inclusion
---
source: https://www.securityfocus.com/bid/25226/info
VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible.
http://www.example.com/path/admin/index.php?language=Sh3LL
No writeups or analysis indexed.
http://securityreason.com/securityalert/2983http://www.securityfocus.com/archive/1/475758/100/0/threadedhttp://www.securityfocus.com/bid/25226https://exchange.xforce.ibmcloud.com/vulnerabilities/35846http://securityreason.com/securityalert/2983http://www.securityfocus.com/archive/1/475758/100/0/threadedhttp://www.securityfocus.com/bid/25226https://exchange.xforce.ibmcloud.com/vulnerabilities/35846
2007-08-08
Published