CVE-2007-2088 Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) writerFile parameter to index.php and the (2)....
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) writerFile parameter to index.php and the (2) file parameter to Integrator.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitebar | <= 3.3.5 | No fix listed |
References
- 35393 vdb-entry
- 35394 vdb-entry
- 2586 third-party-advisory
- 20070414 Sitebar 3.3.5 (index.php writerFile)Remote File Include Vulnerabilities mailing-list
- sitebar-index-integrator-file-include(33688) vdb-entry