CVE-2007-3228 PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code....
MediumCVSS 6.8
EPSS 67.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUM[LIB] parameter. NOTE: by default, access to the PhpDocumentor directory tree is blocked by .htaccess.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simian systems inc sitellite cms | = 4.2.12 | No fix listed |
References
- 36816 vdb-entry
- 20070614 Sitellite CMS <= 4.2.12 (559668.php) Remote File Inclusion Vulnerability mailing-list
- 20070614 Sitellite CMS <= 4.2.12 (559668.php) Remote File Inclusion Vulnerability mailing-list
- 20070616 Sitellite cms <= 4.2.12 RFI Vuln mailing-list
- 20070619 Re: Sitellite cms <= 4.2.12 RFI Vuln mailing-list
- 24474 vdb-entry
- ADV-2007-2207 vdb-entry
- sitellite-forumlib-file-include(34860) vdb-entry
- 4071 exploit