CVE-2007-1073 Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php.
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcrefer | All versions | No fix listed |
References
- 42619 vdb-entry
- 2283 third-party-advisory
- 20070211 Re: mcRefer SQL injection mailing-list