CVE-2007-0181 PHP remote file inclusion vulnerability in include/common_function.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the _config[site_path] paramete...
HighCVSS 7.5
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in include/common_function.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the _config[site_path] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scriptaty magic photo storage website | All versions | No fix listed |
References
- 23687 third-party-advisory
- 20070108 magic photo storage website Remote File Inclusion mailing-list
- 21965 vdb-entry
- ADV-2007-0136 vdb-entry
- magicphotostorage-config-file-include(31347) vdb-entry
- 3100 exploit