CVE-2007-5781

published 2007-11-01

CVE-2007-5781: PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PATH…

Priority P3 50 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

EXPLOIT

PHP remote file inclusion vulnerability in inc/sige_init.php in Sige 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PATH parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sige	sige	—	—

Detection & IOCs extracted from sources · hover to see the quote

path /inc/sige_init.php↗

command /inc/sige_init.php?SYS_PATH=http://localhost/scripts/020.txt?↗

• → Monitor HTTP requests targeting /inc/sige_init.php with a URL-like value in the SYS_PATH parameter, which is the exploitation vector for this RFI vulnerability. ↗
• → Look for GET requests to sige_init.php where SYS_PATH contains an external URL (http:// or https://), potentially with a trailing '?' to nullify the appended local path suffix. ↗

• · The POC uses a trailing '?' in the injected URL to terminate/nullify any string appended by the application after the SYS_PATH value, which is a common RFI bypass technique. Detection rules should account for this pattern. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94