CVE-2007-2736 PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| achievo | = 1.1.0 | No fix listed |
References
- 37919 vdb-entry
- 23992 vdb-entry
- achievo-index-file-include(34305) vdb-entry
- 3928 exploit