CVE-2007-2169 Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into subs.php via the (1) Sub-name or (2) Sub-url field. NOTE: an earlier report indi...
HighCVSS 7.5
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into subs.php via the (1) Sub-name or (2) Sub-url field. NOTE: an earlier report indicated that the add action can be reached through a request to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozzers subsystem | <= 1.0 | No fix listed |
References
- 23548 vdb-entry
- ADV-2007-1446 vdb-entry
- mozzers-subsystem-index-code-execution(33739) vdb-entry
- 3761 exploit