CVE-2007-4231 PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svr_rootscript parameter, a di...
MediumCVSS 6.8
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svr_rootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| idevspot phphostbot | = 1.06 | No fix listed |
References
- advisories.echo.or.id
- 26356 third-party-advisory
- 36296 vdb-entry
- 25221 vdb-entry
- ADV-2007-2811 vdb-entry
- phphostbot-login-file-include(35834) vdb-entry
- 4267 exploit