CVE-2007-4834
published 2007-09-12CVE-2007-4834: Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1)…
PriorityP355high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
58.50%
99.0th percentile
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phprealty | phprealty | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect HTTP requests targeting the MGR parameter in phpRealty admin scripts (index.php, p_ins.php, u_ins.php) under manager/admin/ with a URL value, indicative of remote file inclusion exploitation. ↗
- →Monitor GET/POST requests to manager/admin/index.php, manager/admin/p_ins.php, or manager/admin/u_ins.php where the MGR parameter contains an external URL (http:// or https://) pointing to a remote script. ↗
- ·Vulnerability only affects phpRealty version 0.02; verify the installed version before applying detection rules to avoid false positives on other versions. ↗
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x9wj-2qc6-h283: Multiple PHP remote file inclusion vulnerabilities in phpRealty 0
ghsa_unreviewed·2022-05-01
CVE-2007-4834 [HIGH] CWE-94 GHSA-x9wj-2qc6-h283: Multiple PHP remote file inclusion vulnerabilities in phpRealty 0
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/.
Kernel
namei: allow restricted O_CREAT of FIFOs and regular files
kernel_security·2018-08-23·CVSS 7.2
CVE-2000-1134 [HIGH] namei: allow restricted O_CREAT of FIFOs and regular files
namei: allow restricted O_CREAT of FIFOs and regular files
Disallows open of FIFOs or regular files not owned by the user in world
writable sticky directories, unless the owner is the same as that of the
directory or the file is opened without the O_CREAT flag. The purpose
is to make data spoofing attacks harder. This protection can be turned
on and off separately for FIFOs and regular files via sysctl, just like
the symlinks/hardlinks protection. This patch is based on Openwall's
"HARDEN_FIFO" feature by Solar Designer.
This is a brief list of old vulnerabilities that could have been prevented
by this feature, some of them even allow for privilege escalation:
CVE-2000-1134
CVE-2007-3852
CVE-2008-0525
CVE-2009-0416
CVE-2011-4834
CVE-2015-1838
CVE-2015-7442
CVE-2016-7489
This list is no
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/37074http://osvdb.org/37075http://osvdb.org/37076http://www.securityfocus.com/bid/25610https://exchange.xforce.ibmcloud.com/vulnerabilities/36518https://www.exploit-db.com/exploits/4387http://osvdb.org/37074http://osvdb.org/37075http://osvdb.org/37076http://www.securityfocus.com/bid/25610https://exchange.xforce.ibmcloud.com/vulnerabilities/36518https://www.exploit-db.com/exploits/4387
2007-09-12
Published