CVE-2007-2254 PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir par...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deltascripts php classifieds | = 6.04 | No fix listed |
References
- 2618 third-party-advisory
- 20070425 [false but true] "Allfaclassfieds" RFI no; PHP Classifieds yes mailing-list
- 20070422 Allfaclassfieds (level2.php dir) remote file inclusion mailing-list
- allfaclassfieds-level2-file-include(33798) vdb-entry