CVE-2007-1024 PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter.
HighCVSS 10.0
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| marcello vitagliano meganoides news | = 1.1.1 | No fix listed |
References
- 20070220 [True] Meganoide's news v1.1.1 < = RFi Vulnerabilities mailing-list
- 33736 vdb-entry
- 2266 third-party-advisory
- 20070216 Meganoide's news v1.1.1 < = RFi Vulnerabilities mailing-list
- 22589 exploit vdb-entry
- meganoidesnews-include-file-include(32546) vdb-entry