Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-4326
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-4326

Description:
Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the config[root_ordner] parameter to (1) gruppen.php, (2) bild.php, (3) feed.php, (4) mitglieder.php, (5) online.php, (6) profil.php, and possibly other unspecified PHP scripts.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/35922

SREASON
  http://securityreason.com/securityalert/2993

SAID
  Secunia Advisory: SA26399

OSVDB
  36445
  36446
  36443
  36444
  36447
  36448

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/475954/100/0/threaded


Return to the previous page.