CVE-2007-2202 PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web Services (ACVSWS) PHP5 (ACVSWS_PHP5) 1.0 allows remote attackers to execute arbit...
MediumCVSS 6.8
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web Services (ACVSWS) PHP5 (ACVSWS_PHP5) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CheminInclude parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acvsws php5 | = 1.0 | No fix listed |
References
- 24983 third-party-advisory
- 2609 third-party-advisory
- 20070423 acvsws_php5_v1.0 <= Multiple Remote File Include Vulnerablitiy mailing-list
- 23603 vdb-entry
- ADV-2007-1509 vdb-entry
- acvswebservices-transport-file-include(33840) vdb-entry