CVE-2007-1787 Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary....
HighCVSS 9.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) inc_dir or (2) lib_dir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softerra time-assistant | <= 6.2 | No fix listed |
References
- advisories.echo.or.id vendor-advisory
- 34626 vdb-entry
- 24729 third-party-advisory
- 20070330 [ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability mailing-list
- 23203 vdb-entry
- ADV-2007-1193 vdb-entry
- softerra-timesheetclass-file-include(33327) vdb-entry
- 3600 exploit