CVE-2007-0704 PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669.....
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| somery | = 0.4.6 | No fix listed |
References
- 33608 vdb-entry
- 20070201 True: Somery 0.4.6 (skindir install.php) Remote file include exploit mailing-list
- 2329 exploit