CVE-2007-4313 PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRoot...
MediumCVSS 6.8
EPSS 68.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php blue dragon cms | = 3.0 | No fix listed |
References
- 36442 vdb-entry
- 26414 third-party-advisory
- 20070814 PHP Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability (0dd exploit) mailing-list
- 25264 vdb-entry
- ADV-2007-2861 vdb-entry
- phpbluedragon-activecontent-file-include(35945) vdb-entry
- 4276 exploit