CVE-2007-5388

published 2007-10-12

CVE-2007-5388: Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) app parameter to…

Priority P3 47 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

EXPLOIT

Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) app parameter to apps/apps.php and the (2) wsk parameter to wsk/wsk.php.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
webdesktop	webdesktop	—	—

Detection & IOCs extracted from sources · hover to see the quote

url http://[TARGET]/[PATH]/apps/apps.php?app=[-Sh3ll-]↗

url http://[TARGET]/[PATH]/wsk/wsk.php?wsk=[-Sh3ll-]↗

path apps/apps.php↗

path wsk/wsk.php↗

• → Monitor HTTP requests to apps/apps.php with the 'app' parameter containing a URL (remote file inclusion attempt). ↗
• → Monitor HTTP requests to wsk/wsk.php with the 'wsk' parameter containing a URL (remote file inclusion attempt). ↗
• → The vulnerability affects WebDesktop 0.1; the 'app' parameter to apps/apps.php and the 'wsk' parameter to wsk/wsk.php are the two injection points for remote file inclusion. ↗

• · Remote file inclusion is only exploitable if PHP's allow_url_include (or allow_url_fopen for older PHP versions) is enabled on the target server. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94