CVE-2007-3217
HIGH 7.5EPSS 10.1%
Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the path_inc parameter to (1) index.php in gestion/; (2) identification.php, (3) disconnect.php, (4) loginliste.php, (5) loginmodif.php, (6) index.php, and (7) ident.inc.php in ident/; (8) menuadministration.php and (9) menuprincipal.php in menu/; (10) param.inc.php in param/; (11) index.php in plugins/phpgacl/; and (12) index.php and (13) common.inc.php.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 10.10% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2007-06-14
- Updated
- 2024-08-07
ExploitDB entries (8)
- https://www.exploit-db.com/exploits/30129
- https://www.exploit-db.com/exploits/30128
- https://www.exploit-db.com/exploits/30127
- https://www.exploit-db.com/exploits/30126
- https://www.exploit-db.com/exploits/30125
- https://www.exploit-db.com/exploits/30124
- https://www.exploit-db.com/exploits/30123
- https://www.exploit-db.com/exploits/30122