CVE-2007-2861

Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News (SAXON) 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) news.php, (2) preview.php, or (3) archive-display.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.74% chance of exploitation in the next 30 days, 76th percentile

Published

2007-05-24

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/469220/100/0/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2007-2859
• CVE-2007-2864
• CVE-2007-2857
• CVE-2007-2865
• CVE-2007-2856
• CVE-2007-2872