CVE-2007-1843 PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gszAppPath p...
MediumCVSS 6.8
EPSS 3.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gszAppPath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maptools maplab | = 2.2.1 | No fix listed |
References
- 34620 vdb-entry
- 24715 third-party-advisory vendor-advisory
- 20070402 Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability mailing-list
- 20070402 Re: Maplab <= 2.2.1 (gszAppPath) Remote File InclusionVulnerability mailing-list
- 20070402 Re: Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability mailing-list
- 23249 exploit vdb-entry
- ADV-2007-1203 vdb-entry vendor-advisory
- maplab-params-file-include(33360) vdb-entry
- 3638 exploit