CVE-2007-2347 PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_path....
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oneclick cms | <= 05.10 | No fix listed |
| sisplet cms | <= 05.10 | No fix listed |
References
- 35618 vdb-entry
- 23334 vdb-entry
- ADV-2007-1281 vdb-entry
- Sispletcms-komentar-file-include(33455) vdb-entry
- 3667 exploit