CVE-2007-1640 Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to (1) language.php and (2) phpadmi...
HighCVSS 10.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to (1) language.php and (2) phpadmin/survey.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| classweb | <= 2.03 | No fix listed |
References
- 37214 vdb-entry
- 37215 vdb-entry
- 23095 exploit vdb-entry
- ADV-2007-1085 vdb-entry
- classweb-languagesurvey-file-include(33162) vdb-entry
- 3542 exploit