CVE-2007-2943 PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
MediumCVSS 6.8
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webavis | <= 0.1.1 | No fix listed |
References
- 38050 vdb-entry
- ADV-2007-1963 vdb-entry
- 3987 exploit