CVE-2007-0360 PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
HighCVSS 7.5
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oreon project oreon | <= 1.2.3_rc4 | No fix listed |
References
- 33711 vdb-entry
- 20070211 Oreon1.2.x Series Exploit Coded mailing-list
- 22107 vdb-entry
- ADV-2007-0229 vdb-entry
- oreon-index-file-include(31568) vdb-entry
- 3150 exploit