cbcvebase.
CVE-2007-4744
published 2007-09-06

CVE-2007-4744: PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enabled, allows remote attackers to execute…

PriorityP347medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
60.09%
99.0th percentile
PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIR_PREFIX parameter.

Affected

2 ranges
VendorProductVersion rangeFixed in
anyinventoryanyinventory——
anyinventoryanyinventory——

Detection & IOCsextracted from sources · hover to see the quote

urlhttp://victime.com/[anyInventory_path]/environment.php?DIR_PREFIX=↗
path/environment.php↗
otherDIR_PREFIX↗
  • →Look for HTTP requests targeting environment.php with a URL-based value in the DIR_PREFIX GET parameter, indicative of remote file inclusion exploitation. ↗
  • →The attack requires register_globals to be enabled on the target PHP installation; triage alerts in context of this server configuration. ↗
  • →Search engine dork 'anyInventory, the most flexible and powerful web-based inventory system' was used by the threat actor to identify targets. ↗
  • ·Vulnerability is only exploitable when PHP's register_globals directive is enabled on the server. ↗
  • ·Affected versions are AnyInventory 1.9.1 and 2.0; the exploit PoC specifically targets 2.0 but the NVD entry confirms 1.9.1 is also vulnerable. ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.