CVE-2007-1643 Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG[directories][u...
HighCVSS 10.0
EPSS 10.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG[directories][userpanel_dir] parameter to userpanel.php or the (2) _LIB_DIR parameter to welcome.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lan management system | <= 1.8.9 | No fix listed |
References
- 24621 third-party-advisory vendor-advisory
- 20070426 true: 2 distinct LMS RFI, one old, one new; and vague ACK mailing-list
- 23099 exploit vdb-entry
- 23100 exploit vdb-entry
- ADV-2007-1086 vdb-entry vendor-advisory
- lms-userpanelwelcome-file-include(33158) vdb-entry
- 3545 exploit