CVE-2007-1393 PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
HighCVSS 10.0
EPSS 4.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geo soft magic cms | = 4.2.747 | No fix listed |
References
- 33893 vdb-entry
- 24439 third-party-advisory
- 22162 exploit vdb-entry vendor-advisory
- ADV-2007-0881 vdb-entry
- magiccms-mysave-file-include(32883) vdb-entry
- 3438 exploit