CVE-2007-1982 Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) __IncludeFilePH...
HighCVSS 7.5
EPSS 10.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) __IncludeFilePHPClass, (2) __ClassPath, and (3) __class parameters to (a) rspa/framework/Controller_v5.php, and (b) rspa/framework/Controller_v4.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| really simple php and ajax | <= 2007-03-23 | No fix listed |
References
- 24671 third-party-advisory vendor-advisory
- www.bugtraq.ir
- 23246 vdb-entry
- ADV-2007-1190 vdb-entry
- rspa-controller-file-include(33356) vdb-entry
- 3641 exploit