CVE-2007-0677 PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][fram...
HighCVSS 7.5
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][framework_path] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cronosys cadre php framework | = 22020724 | No fix listed |
References
- echo.or.id exploit
- 33631 vdb-entry
- 2215 third-party-advisory
- 20070131 [ECHO_ADV_63$2007] Cadre remote file inclusion mailing-list
- 22336 exploit vdb-entry
- ADV-2007-0449 vdb-entry
- cadre-classquickconfigbrowser-file-include(32005) vdb-entry
- 3237 exploit