Secunia Logo
 
CVE Reference: CVE-2007-1843
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-1843

Description:
PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gszAppPath parameter.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/33360

SAID
  Secunia Advisory: SA24715

OSVDB
  34620

MILW0RM
  http://www.milw0rm.com/exploits/3638

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/464490/100/0/threaded
  http://www.securityfocus.com/archive/1/archive/1/464503/100/0/threaded
  http://www.securityfocus.com/archive/1/archive/1/464462/100/0/threaded

BID
  23249


Return to the previous page.