CVE-2007-2313 PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.
HighCVSS 7.5
EPSS 6.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mxbb mx shotcast | = 1.0_rc2 | No fix listed |
References
- 23444 exploit vdb-entry
- ADV-2007-1384 vdb-entry
- mxbb-shotcast-getinfo1-file-include(33599) vdb-entry
- 3716 exploit