CVE-2007-1968 PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter.
MediumCVSS 6.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sam crew myblog | = 1.0 | No fix listed |
| sam crew myblog | = 1.1 | No fix listed |
| sam crew myblog | = 1.2 | No fix listed |
| sam crew myblog | = 1.3 | No fix listed |
| sam crew myblog | = 1.4 | No fix listed |
| sam crew myblog | = 1.5 | No fix listed |
| sam crew myblog | = 1.6 | No fix listed |
References
- 2548 third-party-advisory
- 20070410 True: MyBlog games.php RFI exploit mailing-list
- 20070404 MyBlog: PHP and MySQL Blog/CMS software Remote File Include Vulnerabilitiy mailing-list
- 23311 vdb-entry
- ADV-2007-1302 vdb-entry
- 3685 exploit