CVE-2007-2067 Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider (WebSlider) 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) in...
HighCVSS 7.5
EPSS 8.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider (WebSlider) 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) index.php, (2) modules/pdf.php, (3) plugins/highlight.php, or (4) include/modules.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webslider | = 0.6 | No fix listed |
References
- 37436 vdb-entry
- 37437 vdb-entry
- 37438 vdb-entry
- 37439 vdb-entry
- ADV-2007-1397 vdb-entry
- webslider-path-file-include(33689) vdb-entry
- 3745 exploit