CVE-2007-2166 PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPa...
MediumCVSS 6.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathToProjectAdmin parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opensurveypilot | <= 1.2.1 | No fix listed |
References
- osp.cvs.sourceforge.net
- 35022 vdb-entry
- 24915 third-party-advisory
- 23563 vdb-entry
- ADV-2007-1460 vdb-entry
- osp-groupinc-file-include(33749) vdb-entry
- 3765 exploit