CVE-2007-2261 PHP remote file inclusion vulnerability in espaces/communiques/annotations.php in C-Arbre 0.6PR7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter,...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in espaces/communiques/annotations.php in C-Arbre 0.6PR7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, a different vector than CVE-2007-1721.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realink c-arbre | <= 0.6_pr7 | No fix listed |
References
- 35635 vdb-entry
- 2625 third-party-advisory
- 20070422 c-arbre <= Multiple Remote File Include Vulnerablitiy mailing-list
- carbre-annotations-file-include(33816) vdb-entry