CVE-2007-0881 PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the (1) config[oi_dir] and possibly (2) config[o...
MediumCVSS 6.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the (1) config[oi_dir] and possibly (2) config[openi_dir] parameters to open-admin/plugins/site_protection/index.php. NOTE: vector 2 might be the same as CVE-2006-4750.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openi-cms group openi-cms | = 1.0 | No fix listed |
References
- echo.or.id exploit
- 33175 vdb-entry
- 24119 third-party-advisory vendor-advisory
- 22511 vdb-entry
- ADV-2007-0556 vdb-entry
- internalrange-oidir-file-include(32423) vdb-entry
- 3292 exploit