CVE-2007-2676 PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
HighCVSS 7.5
EPSS 70.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open translation engine | = 0.7.8 | No fix listed |
References
- 20070507 TRUE: Open Translation Engine (OTE) 0.7.8 RFI (+ XSS) mailing-list
- 35591 vdb-entry
- 25146 third-party-advisory
- 23793 exploit vdb-entry
- ADV-2007-1650 vdb-entry
- ote-header-file-include(34053) vdb-entry
- 3838 exploit