CVE-2007-2527 Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to (1) dp_logs.php or (2) index....
HighCVSS 7.5
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to (1) dp_logs.php or (2) index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dynamicpad | = 1.02 | No fix listed |
References
- 20070508 FALSE -> DynamicPAD HomeDir RFI mailing-list
- 20070508 Reneged: RE: FALSE -> DynamicPAD HomeDir RFI mailing-list
- dynamicpad.org
- 25176 third-party-advisory
- 23861 vdb-entry
- ADV-2007-1681 vdb-entry
- dynamicpad-homedir-file-include(34125) vdb-entry
- 3868 exploit