CVE-2007-1423 Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to include/incl...
HighCVSS 9.3
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to include/include_top.php and certain other PHP scripts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| work system e-commerce | = 3.0.3 | No fix listed |
| work system e-commerce | = 3.0.4 | No fix listed |
| work system e-commerce | = 3.0.5 | No fix listed |
| work system e-commerce | = 3.0.41 | No fix listed |
References
- 33973 vdb-entry
- 24476 third-party-advisory vendor-advisory
- 22908 vdb-entry
- ADV-2007-0903 vdb-entry
- 3448 exploit