CVE-2007-1458 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-1458
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-1458

Description: Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) inc_checkdate_lang.php, (2) inc_charset_fx.php, (3) inc_config_color.php, (4) inc_currency_set.php, (5) inc_db_makelink.php, (6) inc_diagnostics_report_fx.php, (7) inc_environment_global.php, (8) inc_front_chain_lang.php, (9) inc_init_crypt.php, (10) inc_load_copyrite.php, or (11) inc_news_save.php in include/; (12) diagnostics-report-index.php, (13) config_options_mascot.php, (14) barcode-labels.php, (15) chg-color.php, or (16) config_options_gui_template.php in main/; or unspecified other files.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/32981 SAID Secunia Advisory: SA24481 OSVDB 34057 34058 34048 34049 34045 34056 34046 34047 34059 34060 34050 34051 34052 34053 34054 34055 MISC http://advisories.echo.or.id/adv/adv72-theday-2007.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/462808/100/0/threaded BID 22951

Return to the previous page.