CVE-2007-2774 Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) _connect.php or (2) modules/startup.p...
HighCVSS 7.5
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) _connect.php or (2) modules/startup.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sunlight-cms sunlight cms | = 5.3 | No fix listed |
References
- 36227 broken-link vdb-entry
- 36228 broken-link vdb-entry
- 25366 not-applicable third-party-advisory
- 24062 broken-link vdb-entry
- ADV-2007-1885 not-applicable vdb-entry
- sunlightcms-connectstartup-file-include(34393) third-party-advisory vdb-entry
- 3953 exploit vdb-entry